Junglewise Threat Intelligence

CVE-2026-80616: Linux kernel ieee802154 improper warning handling on memory allocation failure

CVE-2026-80616 · Severity: info · Published 2026-08-28

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

The Linux kernel's IEEE 802.15.4 wireless networking subsystem incorrectly triggered warning messages when memory allocation failures occurred during network namespace switching operations. While not a security vulnerability per se, this issue created unnecessary system log noise and could interfere with fault injection testing and system debugging. The fix removes spurious warnings that don't indicate actual problems.

Technical details

The vulnerability is a code quality issue rather than a security flaw. The cfg802154_switch_netns() function in net/ieee802154/core.c was calling WARN_ON() unconditionally on error return codes from dev_change_net_namespace() and device_rename(), including expected allocation failures (-ENOMEM). This generated unhelpful kernel warnings during deliberate fault injection testing. The fix modifies the WARN_ON() calls to exclude -ENOMEM errors (WARN_ON(err && err != -ENOMEM)), preserving warnings only for genuine unexpected errors. No authentication or network access is required; the issue affects only kernel-level network namespace operations on IEEE 802.15.4 devices.

Affected products

  • Linux Linux kernel multiple versions from 2.6 through 7.2

Timeline

  • 2026-08-28: disclosed
  • 2026-06-19: patched: Fix merged in Stefan Schmidt's tree
  • 2025-04-03: other: Fix authored by Ivan Abramov

References

Related threats