CVE record · CVE-2026-98916

wifi: nl80211: check link is beaconing for color change

No CVSS scoreEPSS 0.0021 · 10th percentile

Published by the CVE Program (CNA: Linux) at 23 Oct 2026, 11:55 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc to before 51423d370739aa3f701fdfbfcc52ecf321dfd71a git
  • affected b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc to before dc4713539da73d2d2c03d064b22b0e6ab38bd361 git
  • affected b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc to before e50965c702cfd41eb83464565f6272d4d4bfc00c git
  • affected b4b9f0a32d3106ba4d0bbd07312dc35d1f2152dc to before 55308cee9c2196f39cd1ce8ee6c1fed9e12a00d4 git
Other versions: unaffected
Linux Linux
  • affected 5.16
  • unaffected before 5.16 semver
  • unaffected 6.6.160 to 6.6.*, inclusive semver
  • unaffected 6.12.114 to 6.12.*, inclusive semver
  • unaffected 6.18.53 to 6.18.*, inclusive semver
  • unaffected 7.2 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98916
CNA
Linux
Published
23 Oct 2026
Updated
26 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0021, the 10th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 23 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.