CVE-2026-98958
kernel: wifi: mt76: account non-AQL frames per peer rather than per link
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 23, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's mt76 wireless driver. When handling connections that use Multi-Link Operation (MLO), transmission completions can be reported on a different wireless link than the one where packets were initially queued, causing packet accounting counters to drift upward incorrectly. This issue can block network packet transmission, allowing an adjacent network participant or peer traffic to cause a Denial of Service (DoS) for the wireless station.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime