CVE-2026-98421

CVE-2026-98421

published October 14, 2026

CVSS
—
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: require a peer station for TDLS setup confirm

It's nonsense for the setup confirm to go to station that

doesn't even exist, and it hits a warning when building

the frame:

WARN_ON_ONCE(!sta || !ap_sta)

Only accept WLAN_TDLS_SETUP_CONFIRM when the station is

already there as a TDLS station. Need to copy the call

to ieee80211_tdls_prep_mgmt_packet() since the existing

WLAN_TDLS_DISCOVERY_REQUEST already falls through to it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.3th percentile
Published
2026-10-14T18:17Z
References (6)
EPSS history
Timeline
  • 16 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 14 OCT 13:27Z
    wifi: mac80211: require a peer station for TDLS setup confirm
    cvelistv5
  • 14 OCT 13:27Z
    wifi: mac80211: require a peer station for TDLS setup confirm
    cvelistv5