CVE-2026-98874: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-23 · updated 2026-10-26

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect Clearly, from a user perspective, it must be valid to configure WoWLAN and then suspend while not connected to a network. Since mac80211 doesn't distinguish these cases and simply calls the driver to suspend whenever WoWLAN is configured, the driver has to cleanly handle the case where it's called for WoWLAN, it's not connected but there's also no netdetect configured. Remove the WARN_ON() and keep returning 1 to disconnect and then suspend.

Affected products

Linux kernel: before 6.18.53 — fixed in 6.18.53, 7.2

How to fix

Upgrade to a fixed version: Linux kernel 6.18.53, 7.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-98874 or the next vulnerability affects your stack