All vulnerabilities
CVE-2026-98874

Linux: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in301b0dfa9db3f1e204de95e803bbd88fbd878c7cAlso 6.18.53CVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect

Clearly, from a user perspective, it must be valid to configure WoWLAN and then suspend while not connected to a network. Since mac80211 doesn't distinguish these cases and simply calls the driver to suspend whenever WoWLAN is configured, the driver has to cleanly handle the case where it's called for WoWLAN, it's not connected but there's also no netdetect configured.

Remove the WARN_ON() and keep returning 1 to disconnect and then suspend.

Text from CVE List

Affected versions 5

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d4158bc784f4b45c8daa446a8e1c29eb11f63674CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 301b0dfa9db3f1e204de95e803bbd88fbd878c7cCVE List
  • Linuxaffected: all versions before 6.18.53CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 2