wifi: mac80211: require a peer station for TDLS setup confirm
Summary
| CVE | CVE-2026-98421 |
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-14 14:17:53 UTC |
| Updated | 2026-10-19 10:18:47 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: require a peer station for TDLS setup confirm
It's nonsense for the setup confirm to go to station that
doesn't even exist, and it hits a warning when building
the frame:
WARN_ON_ONCE(!sta || !ap_sta)
Only accept WLAN_TDLS_SETUP_CONFIRM when the station is
already there as a TDLS station. Need to copy the call
to ieee80211_tdls_prep_mgmt_packet() since the existing
WLAN_TDLS_DISCOVERY_REQUEST already falls through to it. |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected 6f7eaa47e1de30159277f91f1145a6687f13ffd9 6bae6ef511a29ef12ab969adeea691067d4d5d74 git |
Not specified |
| CNA |
Linux |
Linux |
affected 6f7eaa47e1de30159277f91f1145a6687f13ffd9 d0afa5395c46d73ad2090aa50209886e84f179bd git |
Not specified |
| CNA |
Linux |
Linux |
affected 6f7eaa47e1de30159277f91f1145a6687f13ffd9 742c762bee59c973684f70dfed7de4945d3141e2 git |
Not specified |
| CNA |
Linux |
Linux |
affected 6f7eaa47e1de30159277f91f1145a6687f13ffd9 fce36d242a18ddf64731d816a37564103172da11 git |
Not specified |
| CNA |
Linux |
Linux |
affected 6f7eaa47e1de30159277f91f1145a6687f13ffd9 1c0a5c96473b9e7a5f4c453ef6a13dc0f5589a4b git |
Not specified |
| CNA |
Linux |
Linux |
affected 6f7eaa47e1de30159277f91f1145a6687f13ffd9 038e1d126304fd25d507fd4e671232df57bd1799 git |
Not specified |
| CNA |
Linux |
Linux |
affected 3.17 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 3.17 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.1.189 6.1.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.158 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.112 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.54 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.2.8 7.2.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.3 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/1c0a5c96473b9e7a5f4c453ef6a13dc0f5589a4b |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/742c762bee59c973684f70dfed7de4945d3141e2 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/6bae6ef511a29ef12ab969adeea691067d4d5d74 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/fce36d242a18ddf64731d816a37564103172da11 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/d0afa5395c46d73ad2090aa50209886e84f179bd |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/038e1d126304fd25d507fd4e671232df57bd1799 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.