---
id: "CVE-2026-98874"
kind: "vulnerability"
aliases: ["CVE-2026-98874"]
title: "Linux kernel iwlwifi: spurious WARN on WoWLAN suspend without netdetect"
severity: "unknown"
cvss: null
epss: 0.00198
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["iwlwifi", "kernel", "linux", "runtime", "wifi"]
not_affected_if: ["non-intel-wifi", "wowlan-unused"]
published_at: "2026-10-23T12:18:20+00:00"
first_seen_at: "2026-10-23T21:57:33+00:00"
updated_at: "2026-10-25T12:38:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98874", "first_seen_at": "2026-10-23T21:57:33+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-98874", "first_seen_at": "2026-10-25T12:38:51+00:00"}]
---

# Linux kernel iwlwifi: spurious WARN on WoWLAN suspend without netdetect

In the Linux kernel's iwlwifi MLD driver, suspending with WoWLAN configured but no network connection and no netdetect triggered a kernel WARN_ON. The fix removes the warning and keeps the existing disconnect-then-suspend behavior.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-23T21:57:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98874
- 2026-10-25T12:38:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-98874

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect

Clearly, from a user perspective, it must be valid to configure
WoWLAN and then suspend while not connected to a network. Since
mac80211 doesn't distinguish these cases and simply calls the
driver to suspend whenever WoWLAN is configured, the driver has
to cleanly handle the case where it's called for WoWLAN, it's
not connected but there's also no netdetect configured.

Remove the WARN_ON() and keep returning 1 to disconnect and
then suspend.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_