AZL-110591: CVE-2026-98916 affecting package kernel 6.6.157.1-1

Q: What condition must exist for this issue to be triggered?

A color-change operation must be attempted on a wireless link that is not beaconing. The vulnerable path can otherwise call the Wi-Fi driver with an invalid link.

Q: What is the practical mitigation if the updated kernel cannot be deployed immediately?

Avoid initiating Wi-Fi color changes for links unless they are confirmed to be beaconing. This prevents the invalid-link driver call described by the issue.

Published Oct 23, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

wifi: nl80211: check link is beaconing for color change

When trying to do a color change, validate that the link is beaconing first, to avoid calling the driver with an invalid link.

Affected Software

1 affected component

azure-linux/kernel<=6.6.157.1-1

Event History

Oct 23, 2026

Advisory Published

via OSV·12:18 PM

Data Sourced

via OSV·12:18 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-98916

Frequently Asked Questions

What condition must exist for this issue to be triggered?

A color-change operation must be attempted on a wireless link that is not beaconing. The vulnerable path can otherwise call the Wi-Fi driver with an invalid link.

What is the practical mitigation if the updated kernel cannot be deployed immediately?

Avoid initiating Wi-Fi color changes for links unless they are confirmed to be beaconing. This prevents the invalid-link driver call described by the issue.

AZL-110591: CVE-2026-98916 affecting package kernel 6.6.157.1-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What condition must exist for this issue to be triggered?

What is the practical mitigation if the updated kernel cannot be deployed immediately?

Company

Resources

Contact

Frequently Asked Questions

What condition must exist for this issue to be triggered?

What is the practical mitigation if the updated kernel cannot be deployed immediately?