CVE-2026-98421
Received Received - Intake

TDLS Setup Confirmation Flaw in Linux Kernel

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for the setup confirm to go to station that doesn't even exist, and it hits a warning when building the frame: WARN_ON_ONCE(!sta || !ap_sta) Only accept WLAN_TDLS_SETUP_CONFIRM when the station is already there as a TDLS station. Need to copy the call to ieee80211_tdls_prep_mgmt_packet() since the existing WLAN_TDLS_DISCOVERY_REQUEST already falls through to it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-98421
EUVD
EUVD-2026-101070

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
Linux Linux 6f7eaa47e1de30159277f91f1145a6687f13ffd9
Linux Linux 6f7eaa47e1de30159277f91f1145a6687f13ffd9
Linux Linux 6f7eaa47e1de30159277f91f1145a6687f13ffd9
Linux Linux 6f7eaa47e1de30159277f91f1145a6687f13ffd9
Linux Linux 6f7eaa47e1de30159277f91f1145a6687f13ffd9
Linux Linux 6f7eaa47e1de30159277f91f1145a6687f13ffd9
Linux Linux 3.17

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the Wi-Fi subsystem where a TDLS setup confirm frame is incorrectly sent to a non-existent station. This triggers a warning during frame construction because the system checks for a valid peer station and access point station, which are missing. The fix ensures that WLAN_TDLS_SETUP_CONFIRM frames are only accepted when a TDLS station already exists.

Detection Guidance

This vulnerability is specific to the Linux kernel's mac80211 subsystem and relates to TDLS setup confirm handling. Detection requires checking kernel logs for WARN_ON_ONCE warnings about missing stations during TDLS operations. Monitor logs with dmesg or journalctl for messages related to mac80211 or TDLS.

Impact Analysis

This vulnerability may cause system warnings or errors when handling Wi-Fi TDLS (Tunneled Direct Link Setup) frames. It could lead to unexpected behavior in Wi-Fi connections but does not appear to allow unauthorized access or data breaches based on the provided details.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to Wi-Fi TDLS setup confirm handling, which does not involve data privacy, security controls, or protected health information.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch this issue. If immediate patching is not possible, disable TDLS functionality by setting the kernel parameter cfg80211.disable_tdls=1 or blacklisting the mac80211 module. Monitor vendor advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98421. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart