CVE-2026-98421

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for the setup confirm to go to station that doesn't even exist, and it hits a warning when building the frame: WARN_ON_ONCE(!sta || !ap_sta) Only accept WLAN_TDLS_SETUP_CONFIRM when the station is already there as a TDLS station. Need to copy the call to ieee80211_tdls_prep_mgmt_packet() since the existing WLAN_TDLS_DISCOVERY_REQUEST already falls through to it.

Is your site exposed to CVE-2026-98421?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0022

Probability of exploitation

0.12%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/038e1d126304fd25d507fd4e671232df57bd1799 https://git.kernel.org/stable/c/1c0a5c96473b9e7a5f4c453ef6a13dc0f5589a4b https://git.kernel.org/stable/c/6bae6ef511a29ef12ab969adeea691067d4d5d74 https://git.kernel.org/stable/c/742c762bee59c973684f70dfed7de4945d3141e2 https://git.kernel.org/stable/c/d0afa5395c46d73ad2090aa50209886e84f179bd https://git.kernel.org/stable/c/fce36d242a18ddf64731d816a37564103172da11

Frequently Asked Questions

What is CVE-2026-98421? +

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for the setup confirm to go to station that doesn't even exist, and it hits a warning when building the frame: WARN_ON_ONCE(!sta || !ap_sta) Only accept WLAN_TDLS_SETUP_CONFIRM when the station is already there as a TDLS station. Need to copy the call to ieee80211_tdls_prep_mgmt_packet() since the existing WLAN_TDLS_DISCOVERY_REQUEST already falls through to it.

How do I check if I'm vulnerable to CVE-2026-98421? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.