Is there a patch available for CVE-2026-98426?

Yes, a patch is available for CVE-2026-98426. Update the affected software to the latest version immediately.

Linux CVE-2026-98426

EUVD-2026-101075

2026-10-14 Linux

GHSA-558r-qp8j-rr6r

Information Disclosure Linux

View

Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path

mwifiex_pcie_request_irq() registers each MSI-X vector with a per-index dev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop "for (j = 0; j < i; j++)" frees msix_entries[j].vector but passes the failed index's &card->msix_ctx[i] as the dev_id. free_irq() matches on (irq, dev_id), so it fails to find the action registered with &card->msix_ctx[j]: the already-requested IRQ j is not freed (leaked) and free_irq() warns about freeing a non-existent IRQ. Use &card->msix_ctx[j].

Affected VersionsENISA

Linux patch: 0

Linux patch: 7.3-rc4

Linux 99074fc1e67b374b5c72406a23ac01fed806d634 <fcac5813f324cd07dfd36b4adf624fc70f7587d6

Linux 4.6

Linux 99074fc1e67b374b5c72406a23ac01fed806d634 <a3d722190cdef18da4878b5efc27c3c386dda248

Linux 99074fc1e67b374b5c72406a23ac01fed806d634 <2761b21cb896b1da8dd46cee5084c9032b2d7098

Linux patch: 7.2.8

Linux patch: 5.10.271

Linux 99074fc1e67b374b5c72406a23ac01fed806d634 <5fd4cc87e6cc0839aac89c24ebe39ce262fe088f

Linux 99074fc1e67b374b5c72406a23ac01fed806d634 <1a60cb2292194cc9eafae7ca8a8a72d37ae78d97

Linux patch: 6.12.112

Linux patch: 6.1.189

Linux patch: 5.15.222

Linux 99074fc1e67b374b5c72406a23ac01fed806d634 <0969c9688389f2e0f65b1a924b0dd6625a3bb776

Linux patch: 6.18.54

Linux 99074fc1e67b374b5c72406a23ac01fed806d634 <03d5e4776e8b71c2468c5c3c48b39202c87a8796

Linux 99074fc1e67b374b5c72406a23ac01fed806d634 <11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd

Linux patch: 6.6.158

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Lifecycle Timeline

Patch available

Oct 14, 2026 - 15:03 EUVD

CVE Published

Oct 14, 2026 - 13:27 cve.org

UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score

0.2%

Top 88% exploitable

Data Quality

3 sources

Confidence: Low

EUVD

CVE.org

EPSS MSRC

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.