CVE-2026-98916: wifi: nl80211: check link is beaconing for color change

Published Oct 23, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

wifi: nl80211: check link is beaconing for color change

When trying to do a color change, validate that the link is beaconing first, to avoid calling the driver with an invalid link.

Affected Software

1 affected component

Linux Linux kernel

Event History

Oct 23, 2026

CVE Published

via MITRE·11:55 AM

Data Sourced

via MITRE·11:55 AM

Description

Frequently Asked Questions

What condition must exist for this issue to be triggered?

A color-change operation must be attempted for a wireless link that is not beaconing. The vulnerable path can otherwise call the Wi-Fi driver with an invalid link.

Which systems are relevant to triage?

Systems running the Linux kernel with Wi-Fi functionality that uses nl80211 color-change operations are relevant. The provided information does not identify affected kernel versions, default configurations, or specific drivers.

What is the mitigation if an update cannot be applied immediately?

Avoid initiating color-change operations on links unless they are confirmed to be beaconing. This prevents the invalid-link driver call described in the advisory.

CVE-2026-98916: wifi: nl80211: check link is beaconing for color change

Affected Software

Event History

Frequently Asked Questions

What condition must exist for this issue to be triggered?

Which systems are relevant to triage?

What is the mitigation if an update cannot be applied immediately?

Company

Resources

Contact

Frequently Asked Questions

What condition must exist for this issue to be triggered?

Which systems are relevant to triage?

What is the mitigation if an update cannot be applied immediately?