{"id":"CVE-2026-98916","kind":"vulnerability","aliases":["CVE-2026-98916"],"related":[],"title":"Linux kernel: wifi color change runs on non-beaconing link","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: check link is beaconing for color change\n\nWhen trying to do a color change, validate that the link is\nbeaconing first, to avoid calling the driver with an invalid\nlink.","summary":"The Linux kernel's nl80211 wifi interface could start a BSS color change on a link that was not beaconing, passing an invalid link to the driver. The sources do not describe a confirmed attacker outcome beyond a driver call on an invalid link.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","linux","wifi"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-23T12:18:25+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T04:58:24+00:00","updated_at":"2026-10-25T04:58:24+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-10-25T04:58:24Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel: wifi color change runs on non-beaconing link","impact":"low","summary":"The Linux kernel's nl80211 wifi interface could start a BSS color change on a link that was not beaconing, passing an invalid link to the driver. The sources do not describe a confirmed attacker outcome beyond a driver call on an invalid link.","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel","wifi"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; sources do not describe the impact","analyst_note":"Find the upstream kernel commit and the affected stable kernel versions; check whether a local user with nl80211 privileges can trigger the invalid driver call and what it leads to.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000508,"input_tokens":3295,"output_tokens":357,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98916':14A,17A 'attack':56B 'avoid':100C 'beacon':10A,41B,81C,97C 'beyond':58B 'bss':32B 'call':61B,101C 'chang':5A,34B,84C,91C 'check':78C 'color':4A,33B,83C,90C 'confirm':55B 'could':29B 'cve':12A,15A 'describ':53B 'driver':48B,60B,103C 'first':98C 'follow':71C 'infrastructur':18B 'interfac':28B 'invalid':44B,64B,106C 'kernel':2A,19B,24B,69C 'link':11A,37B,45B,65B,79C,95C,107C 'linux':1A,20B,23B,68C 'nl80211':26B,77C 'non':9A 'non-beacon':8A 'outcom':57B 'pass':42B 'resolv':75C 'run':6A 'sourc':50B 'start':30B 'tri':86C 'valid':92C 'vulner':72C 'wifi':3A,21B,27B,76C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T12:18:25+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98916","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98916","severity":null,"published_at":"2026-10-23T12:18:25+00:00","modified_at":"2026-10-23T12:18:25+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}