CVE-2026-98916

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98916", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.380Z", "datePublished": "2026-10-23T11:55:20.958Z", "dateUpdated": "2026-10-26T06:56:47.686Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-26T06:56:47.686Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: check link is beaconing for color change\n\nWhen trying to do a color change, validate that the link is\nbeaconing first, to avoid calling the driver with an invalid\nlink."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/wireless/nl80211.c"], "versions": [{"version": "b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc", "lessThan": "51423d370739aa3f701fdfbfcc52ecf321dfd71a", "status": "affected", "versionType": "git"}, {"version": "b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc", "lessThan": "dc4713539da73d2d2c03d064b22b0e6ab38bd361", "status": "affected", "versionType": "git"}, {"version": "b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc", "lessThan": "e50965c702cfd41eb83464565f6272d4d4bfc00c", "status": "affected", "versionType": "git"}, {"version": "b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc", "lessThan": "55308cee9c2196f39cd1ce8ee6c1fed9e12a00d4", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/wireless/nl80211.c"], "versions": [{"version": "5.16", "status": "affected"}, {"version": "0", "lessThan": "5.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.114", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.12.114"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/51423d370739aa3f701fdfbfcc52ecf321dfd71a"}, {"url": "https://git.kernel.org/stable/c/dc4713539da73d2d2c03d064b22b0e6ab38bd361"}, {"url": "https://git.kernel.org/stable/c/e50965c702cfd41eb83464565f6272d4d4bfc00c"}, {"url": "https://git.kernel.org/stable/c/55308cee9c2196f39cd1ce8ee6c1fed9e12a00d4"}], "title": "wifi: nl80211: check link is beaconing for color change", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/wireless/nl80211.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "51423d370739aa3f701fdfbfcc52ecf321dfd71a", "status": "affected", "version": "b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc", "versionType": "git"}, {"lessThan": "dc4713539da73d2d2c03d064b22b0e6ab38bd361", "status": "affected", "version": "b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc", "versionType": "git"}, {"lessThan": "e50965c702cfd41eb83464565f6272d4d4bfc00c", "status": "affected", "version": "b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc", "versionType": "git"}, {"lessThan": "55308cee9c2196f39cd1ce8ee6c1fed9e12a00d4", "status": "affected", "version": "b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/wireless/nl80211.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"lessThan": "5.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.114", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: check link is beaconing for color change\n\nWhen trying to do a color change, validate that the link is\nbeaconing first, to avoid calling the driver with an invalid\nlink."}], "id": "CVE-2026-98916", "lastModified": "2026-10-26T07:17:17.513", "metrics": {}, "published": "2026-10-23T12:18:25.797", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/51423d370739aa3f701fdfbfcc52ecf321dfd71a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/55308cee9c2196f39cd1ce8ee6c1fed9e12a00d4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/dc4713539da73d2d2c03d064b22b0e6ab38bd361"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e50965c702cfd41eb83464565f6272d4d4bfc00c"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: wifi: nl80211: check link is beaconing for color change", "id": "2559585", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559585"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-628", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nwifi: nl80211: check link is beaconing for color change\nWhen trying to do a color change, validate that the link is\nbeaconing first, to avoid calling the driver with an invalid\nlink.", "A flaw was found in the Linux kernel's nl80211 wireless subsystem. A local user with network administration privileges could cause a Denial of Service (DoS) by requesting a Basic Service Set (BSS) color change on an inactive or non-beaconing wireless link. Because the interface fails to verify that the link is beaconing before proceeding, the kernel passes an invalid link state to the underlying wireless driver, which may trigger a system crash."], "name": "CVE-2026-98916", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98916\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98916\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98916.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,51423d370739aa3f701fdfbfcc52ecf321dfd71a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,dc4713539da73d2d2c03d064b22b0e6ab38bd361)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,e50965c702cfd41eb83464565f6272d4d4bfc00c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,55308cee9c2196f39cd1ce8ee6c1fed9e12a00d4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.6.160)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.12.114)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.18.53)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,7.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.114,7.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,7.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,51423d370739aa3f701fdfbfcc52ecf321dfd71a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,dc4713539da73d2d2c03d064b22b0e6ab38bd361)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,e50965c702cfd41eb83464565f6272d4d4bfc00c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,55308cee9c2196f39cd1ce8ee6c1fed9e12a00d4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.6.160)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.12.114)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.18.53)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,7.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.114,7.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,7.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-23T14:45:17.887268+00:00", "updated": "2026-10-29T13:45:17.582679+00:00", "vendors": ["linux", "linux$PRODUCT$linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-398", "CWE-704", "CWE-628"]}