CVE-2026-98421
Last modified
CVE-2026-98421 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for the setup confirm to go to station that doesn't even exist, and it hits a warning when building the frame: WARN_ON_ONCE(!sta || !ap_sta) Only accept WLAN_TDLS_SETUP_CONFIRM when the station is already there as a TDLS station. Need to copy the call to ieee80211_tdls_prep_mgmt_packet() since the existing WLAN_TDLS_DISCOVERY_REQUEST already falls through to it..
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for the setup confirm to go to station that doesn't even exist, and it hits a warning when building the frame: WARN_ON_ONCE(!sta || !ap_sta) Only accept WLAN_TDLS_SETUP_CONFIRM when the station is already there as a TDLS station. Need to copy the call to ieee80211_tdls_prep_mgmt_packet() since the existing WLAN_TDLS_DISCOVERY_REQUEST already falls through to it.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 6f7eaa47e1de30159277f91f1145a6687f13ffd9, < 6bae6ef511a29ef12ab969adeea691067d4d5d74; >= 6f7eaa47e1de30159277f91f1145a6687f13ffd9, < d0afa5395c46d73ad2090aa50209886e84f179bd; >= 6f7eaa47e1de30159277f91f1145a6687f13ffd9, < 742c762bee59c973684f70dfed7de4945d3141e2; >= 6f7eaa47e1de30159277f91f1145a6687f13ffd9, < fce36d242a18ddf64731d816a37564103172da11; >= 6f7eaa47e1de30159277f91f1145a6687f13ffd9, < 1c0a5c96473b9e7a5f4c453ef6a13dc0f5589a4b; >= 6f7eaa47e1de30159277f91f1145a6687f13ffd9, < 038e1d126304fd25d507fd4e671232df57bd1799 |
| Linux | Linux | 3.17 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98421?
How severe is CVE-2026-98421?
How do I fix CVE-2026-98421?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98416In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98417In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98418In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98419In the Linux kernel, the following vulnerability has been re…
- CVE-2026-9842The Backstage - Customizer Demo Access plugin for WordPress …7.5
- CVE-2026-98420In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98422In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98423In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98424In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98425In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98426In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98427In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-98421?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
