In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver… (CVE-2026-98958)
Description
A vulnerability in the Linux kernel's mt76 WiFi driver was resolved that involved incorrect accounting of non-AQL frames per peer rather than per link. The driver increments and decrements counters for frames on different links, causing the count to drift upwards and potentially block the station. The fix ensures the count is maintained on the primary link's wcid, aligning with other peer-wide state management.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel mt76 WiFi driver had a flaw where non-AQL frame counters were incremented and decremented on different link wcids due to multi-link operation (MLO). This mismatch caused the counter to increase incorrectly until the station was blocked. The vulnerability was addressed by keeping the count on the wcid of the primary link, ensuring consistent accounting and preventing the counter drift.
Potential Impact
The incorrect frame counting could lead to the station being blocked due to counter drift, potentially causing denial of service for the affected WiFi station. No information about exploitation or broader impact is provided.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to correct the counting behavior in the mt76 driver. Users should update to the fixed kernel version once available. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-ffj9-hv8w-32hf
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-98958"]
Threat ID: 6adbaad0d73cc49347b20583
Added to database: 10/23/2026, 18:43:28 UTC
Last enriched: 10/23/2026, 18:59:02 UTC
Last updated: 10/23/2026, 22:25:04 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.