Linux Kernel up to 7.2.7/7.3-rc3 mac80211 ieee80211_tdls_oper input validation

Summaryinfo

A vulnerability was found in Linux Kernel up to 7.2.7/7.3-rc3. It has been classified as very critical. This impacts the function ieee80211_tdls_oper of the component mac80211. This manipulation causes input validation. This vulnerability is handled as CVE-2026-98332. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as very critical was found in Linux Kernel up to 7.2.7/7.3-rc3. Affected by this vulnerability is the function ieee80211_tdls_oper of the component mac80211. The manipulation with an unknown input leads to a input validation vulnerability. The CWE definition for the vulnerability is CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peers in the TDLS code ieee80211_tdls_oper() can operate on the AP station, which then yields various warnings when the AP station is removed then or at a later point in time after being confused for a TDLS peer. Always check that the station is a TDLS peer.

The advisory is shared at git.kernel.org. This vulnerability is known as CVE-2026-98332 since 09/25/2026. The exploitation appears to be easy. The attack can be launched remotely. Technical details are known, but no exploit is available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 10/06/2026).

Upgrading to version 7.2.8 or 7.3-rc4 eliminates this vulnerability. Applying the patch 0cd452ccaa5c5971440256ce72c64611eca176c1/6f0a100df8539ce90f37c14e1945f396ca2410bc is able to eliminate this problem. The best possible mitigation is suggested to be upgrading to the latest version.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 7.2.0
• 7.2.1
• 7.2.2
• 7.2.3
• 7.2.4
• 7.2.5
• 7.2.6
• 7.2.7
• 7.3-rc1
• 7.3-rc2
• 7.3-rc3

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion