CVE-2026-98332: wifi: mac80211: only operate on TDLS peers in the TDLS code

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-06 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peers in the TDLS code ieee80211_tdls_oper() can operate on the AP station, which then yields various warnings when the AP station is removed then or at a later point in time after being confused for a TDLS peer. Always check that the station is a TDLS peer.

Affected products

Linux kernel: 3.2 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/0cd452ccaa5c5971440256ce72c64611eca176c1
https://git.kernel.org/stable/c/6f0a100df8539ce90f37c14e1945f396ca2410bc

Get alerted when CVE-2026-98332 or the next vulnerability affects your stack