CVE-2026-98421
priority · track · 0EPSS 0.002 · 11 %ileDEFREPSS · scored 2026-10-22
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for the setup confirm to go to station that doesn't even exist, and it hits a warning when building the frame: WARN_ON_ONCE(!sta || !ap_sta) Only accept WLAN_TDLS_SETUP_CONFIRM when the station is already there as a TDLS station. Need to copy the call to ieee80211_tdls_prep_mgmt_packet() since the existing WLAN_TDLS_DISCOVERY_REQUEST already falls through to it.
cvss
Technical severity, 0–10. One row per scoring source.
No CVSS score recorded.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-3951Linux Kernel: Mehrere SchwachstellenDeutsch2026-10-14csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Angriff auszulösen, Daten zu manipulieren oder offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
- CERTFR-2026-AVI-1374Multiples vulnérabilités dans le noyau Linux de DebianFrançais2026-10-23vendor · certfrFR
- CERTFR-2026-AVI-1375Multiples vulnérabilités dans le noyau Linux de Debian LTSFrançais2026-10-23vendor · certfrFR
sources
Which sources assert this record, and when.
references (6) nvd
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/038e1d126304fd25d507fd4e671232df57bd1799
- https://git.kernel.org/stable/c/1c0a5c96473b9e7a5f4c453ef6a13dc0f5589a4b
- https://git.kernel.org/stable/c/6bae6ef511a29ef12ab969adeea691067d4d5d74
- https://git.kernel.org/stable/c/742c762bee59c973684f70dfed7de4945d3141e2
- https://git.kernel.org/stable/c/d0afa5395c46d73ad2090aa50209886e84f179bd
- https://git.kernel.org/stable/c/fce36d242a18ddf64731d816a37564103172da11
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan