CVE-2026-98421
Received
Received - Intake
TDLS Setup Confirmation Flaw in Linux Kernel
Vulnerability report for CVE-2026-98421, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-14
Last updated on: 2026-10-14
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: require a peer station for TDLS setup confirm
It's nonsense for the setup confirm to go to station that
doesn't even exist, and it hits a warning when building
the frame:
WARN_ON_ONCE(!sta || !ap_sta)
Only accept WLAN_TDLS_SETUP_CONFIRM when the station is
already there as a TDLS station. Need to copy the call
to ieee80211_tdls_prep_mgmt_packet() since the existing
WLAN_TDLS_DISCOVERY_REQUEST already falls through to it.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 6f7eaa47e1de30159277f91f1145a6687f13ffd9 |
| Linux | Linux | 6f7eaa47e1de30159277f91f1145a6687f13ffd9 |
| Linux | Linux | 6f7eaa47e1de30159277f91f1145a6687f13ffd9 |
| Linux | Linux | 6f7eaa47e1de30159277f91f1145a6687f13ffd9 |
| Linux | Linux | 6f7eaa47e1de30159277f91f1145a6687f13ffd9 |
| Linux | Linux | 6f7eaa47e1de30159277f91f1145a6687f13ffd9 |
| Linux | Linux | 3.17 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
