CVE-2026-98874 wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-98874?
CVE-2026-98874 is a vulnerability in Linux, published on 23 Oct 2026.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect
Clearly, from a user perspective, it must be valid to configure WoWLAN and then suspend while not connected to a network. Since mac80211 doesn't distinguish these cases and simply calls the driver to suspend whenever WoWLAN is configured, the driver has to cleanly handle the case where it's called for WoWLAN, it's not connected but there's also no netdetect configured.
Remove the WARN_ON() and keep returning 1 to disconnect and then suspend.
Which versions are affected by CVE-2026-98874?
How do I fix CVE-2026-98874?
Upgrade to a fixed version.
Is CVE-2026-98874 being exploited?
There is no known exploitation of CVE-2026-98874 in the wild and no public exploit code.
Sources
Also known as AZL-110555, BELL-CVE-2026-98874, DEBIAN-CVE-2026-98874, GHSA-59h4-j8cc-9mjg, UBUNTU-CVE-2026-98874.