CVE-2026-98332

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peers in the TDLS code ieee80211_tdls_oper() can operate on the AP station, which then yields various warnings when the AP station is removed then or at a later point in time after being confused for a TDLS peer. Always check that the station is a TDLS peer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98332

EUVD

EUVD-2026-93317

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	dfe018bf99537e42c816d3f543620a7e09fcf3cd
Linux	Linux	dfe018bf99537e42c816d3f543620a7e09fcf3cd
Linux	Linux	3.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the mac80211 subsystem mishandling TDLS (Tunneled Direct-Link Setup) peer operations. The function ieee80211_tdls_oper() incorrectly allowed operations on the AP station, which could be mistaken for a TDLS peer. This leads to confusion and potential warnings when the AP station is later removed or accessed.

Detection Guidance

This vulnerability is specific to the Linux kernel's mac80211 subsystem and relates to TDLS peer handling. Detection requires checking kernel logs for warnings about station confusion or removal issues in TDLS operations. Use commands like dmesg | grep tdls or journalctl -k | grep tdls to inspect logs for related warnings.

Impact Analysis

This vulnerability may cause system instability or warnings in the Linux kernel when managing Wi-Fi connections. It could lead to unexpected behavior during AP station removal or operations, potentially disrupting network connectivity or causing kernel logs to fill with warnings.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a Linux kernel issue related to WiFi TDLS peer operations. No evidence suggests it impacts data protection or privacy requirements.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to resolve this issue. If an update is not immediately available, avoid using TDLS features or disable them via kernel parameters until patched. Monitor kernel logs for warnings related to station confusion in TDLS operations.

Hi! I’m here to help you understand CVE-2026-98332. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70