CVE-2026-98874

medium

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect Clearly, from a user perspective, it must be valid to configure WoWLAN and then suspend while not connected to a network. Since mac80211 doesn't distinguish these cases and simply calls the driver to suspend whenever WoWLAN is configured, the driver has to cleanly handle the case where it's called for WoWLAN, it's not connected but there's also no netdetect configured. Remove the WARN_ON() and keep returning 1 to disconnect and then suspend.

References

https://git.kernel.org/stable/c/d4158bc784f4b45c8daa446a8e1c29eb11f63674

https://git.kernel.org/stable/c/301b0dfa9db3f1e204de95e803bbd88fbd878c7c

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108720

Details

Source: Mitre, NVD

Published: 2026-10-23

Updated: 2026-10-23

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium