CVE-2026-98191
Last modified
CVE-2026-98191 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: release runtime PM ref on regdomain config failure wlcore_regdomain_config() gets a runtime PM reference before sending the regulatory-domain command. When wlcore_cmd_regdomain_config_locked() fails, the function queues recovery and returns without dropping that reference. Release the reference after handling the command result so both success and failure paths balance the preceding pm_runtime_resume_and_get().
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: release runtime PM ref on regdomain config failure wlcore_regdomain_config() gets a runtime PM reference before sending the regulatory-domain command. When wlcore_cmd_regdomain_config_locked() fails, the function queues recovery and returns without dropping that reference. Release the reference after handling the command result so both success and failure paths balance the preceding pm_runtime_resume_and_get(). The recovery worker takes a separate runtime PM reference and cannot release the reference held here.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8, < 85ec6c451fe681ac3135dfa43a519f1404ae63ad; >= fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8, < 3fbaae01bb7847d8b0124a8bbdb3af865e388d53; >= fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8, < c02352e2b5a241c8da89b5f5f1a0ae4d403120ed; >= fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8, < 05b5e297bbf46f92c80da4c2ebe67828ca0d0247; >= fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8, < 18eb148105f1af9163f5e9758f0a7bc6ab042423; >= fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8, < 7f1f25b2db14683ab75d0d22c00d6a75ba988b83; >= fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8, < a6bb6ad517a0d4db33a0cac9448e3ae9f4008fb4; >= fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8, < 8a1f3cf89ddcc700e25afe42cfad333059adcc94 |
| Linux | Linux | 4.19 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98191?
How severe is CVE-2026-98191?
How do I fix CVE-2026-98191?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98185In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98186In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98187In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98188In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98189In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98190In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98192In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98193In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98194In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98195In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98196In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98197In the Linux kernel, the following vulnerability has been re…7
Are you affected by CVE-2026-98191?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST