{"id":"CVE-2026-98874","revision":null,"records":[{"revision":"2d5665278ebb436489c68d6063957fd0","observedAt":"2026-10-23T16:01:20.601+00:00","statement":{"source":"cve-program","id":"CVE-2026-98874","aliases":[],"title":"wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect\n\nClearly, from a user perspective, it must be valid to configure\nWoWLAN and then suspend while not connected to a network. Since\nmac80211 doesn't distinguish these cases and simply calls the\ndriver to suspend whenever WoWLAN is configured, the driver has\nto cleanly handle the case where it's called for WoWLAN, it's\nnot connected but there's also no netdetect configured.\n\nRemove the WARN_ON() and keep returning 1 to disconnect and\nthen suspend.","state":0,"publishedAt":"2026-10-23T11:37:18.847+00:00","modifiedAt":"2026-10-23T11:37:18.847+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/intel/iwlwifi/mld/d3.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\",\n                            \"lessThan\": \"d4158bc784f4b45c8daa446a8e1c29eb11f63674\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\",\n                            \"lessThan\": \"301b0dfa9db3f1e204de95e803bbd88fbd878c7c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.18.53\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/intel/iwlwifi/mld/d3.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.18.53\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/d4158bc784f4b45c8daa446a8e1c29eb11f63674","https://git.kernel.org/stable/c/301b0dfa9db3f1e204de95e803bbd88fbd878c7c"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98874","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98874","identifiers":["CVE-2026-98874"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-10-24T10:27:30.8908525+00:00","complete":true,"records":1756,"lastAttemptAt":"2026-10-24T10:27:30.8908525+00:00","lastSuccessAt":"2026-10-24T10:27:31.1285633+00:00","error":null,"lastVerifiedAt":"2026-10-24T10:27:31.1285641+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-9b3cad78792c7367da03684feab05819ddebc4d137048bdbbdabdbb4d2879391-c6a8234687801ee57ab2aeb77d20947f334a6cc2941ea8b25213d5a7dcebf0ce","complete":true,"records":413884,"lastAttemptAt":"2026-10-24T10:27:30.7016219+00:00","lastSuccessAt":"2026-10-24T10:27:30.6836858+00:00","error":null,"lastVerifiedAt":"2026-10-24T10:27:30.7016219+00:00","snapshotPublishedAt":"2026-10-24T10:24:24+00:00","importing":false,"stagedRecords":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-10-24T10:27:30.8908525+00:00","complete":true,"records":1093,"lastAttemptAt":"2026-10-24T10:27:30.8908525+00:00","lastSuccessAt":"2026-10-24T10:27:31.3689689+00:00","error":null,"lastVerifiedAt":"2026-10-24T10:27:31.3689698+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-16ad89dfea13ab9e9b0108e63a759d63bd4559cc68b58491107d62ee35bbbaf2","complete":true,"records":1965,"lastAttemptAt":"2026-10-24T10:27:30.7587662+00:00","lastSuccessAt":"2026-10-23T16:01:26.4487605+00:00","error":null,"lastVerifiedAt":"2026-10-24T10:27:30.7587662+00:00","snapshotPublishedAt":"2026-10-21T12:18:07+00:00","importing":false,"stagedRecords":0}]}