CVE-2026-98958
Last modified
CVE-2026-98958 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver increments wcid->non_aql_packets when a frame goes to the hardware queue. The completion path decrements the counter again. For an MLO peer, the hardware reports the completion on the link that it used for the transmission.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver increments wcid->non_aql_packets when a frame goes to the hardware queue. The completion path decrements the counter again. For an MLO peer, the hardware reports the completion on the link that it used for the transmission. This link can differ from the link that the driver queued the frame on. In that case, the increment and the decrement go to different link wcids, and the count drifts upwards until it blocks the station. Keep the count on the wcid of the primary link, like the other peer-wide state.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 86c051f2c418abd7eefd8c545a01bdffd220cb95, < 9f28f504650869d41f7b3e98e4bc4547af4d5670; >= 86c051f2c418abd7eefd8c545a01bdffd220cb95, < e0f2ae4a7539454ec50c353571779fcda8c0cfcf; >= 86c051f2c418abd7eefd8c545a01bdffd220cb95, < 752770d7a58c821c17909c3ca67f9f14ab146a40 |
| Linux | Linux | 6.11 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98958?
How severe is CVE-2026-98958?
How do I fix CVE-2026-98958?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98952In the Linux kernel, the following vulnerability has been re…7.3
- CVE-2026-98953In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98954In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98955In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98956In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98957In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98959In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-9896Out of bounds write in V8 in Google Chrome prior to 148.0.77…8.8
- CVE-2026-98960In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98961In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98962In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98963In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-98958?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
