Security Flaw in Linux Kernel Affecting Wi-Fi TDLS Feature

CVE-2026-98421

What is CVE-2026-98421?

A vulnerability exists in the Linux kernel's implementation of the Wi-Fi Direct feature, specifically related to the TDLS (Tunneled Direct Link Setup) setup confirmation process. The issue arises when a TDLS setup confirmation is processed for a non-existent peer station, leading to potential warnings during frame construction. This flaw requires a redesign to ensure that a WLAN_TDLS_SETUP_CONFIRM is only accepted when it involves an actual TDLS station. Proper validation checks should be implemented to prevent erroneous conditions which might compromise Wi-Fi connectivity and performance.

References