{"cve":"CVE-2026-98958","nvd":{"published":"2026-10-23T13:17:17.120","modified":"2026-10-23T13:17:17.120","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: account non-AQL frames per peer rather than per link\n\nThe driver increments wcid->non_aql_packets when a frame goes to the\nhardware queue. The completion path decrements the counter again.\n\nFor an MLO peer, the hardware reports the completion on the link that it\nused for the transmission. This link can differ from the link that the\ndriver queued the frame on. In that case, the increment and the\ndecrement go to different link wcids, and the count drifts upwards until\nit blocks the station.\n\nKeep the count on the wcid of the primary link, like the other peer-wide\nstate.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/752770d7a58c821c17909c3ca67f9f14ab146a40","https://git.kernel.org/stable/c/9f28f504650869d41f7b3e98e4bc4547af4d5670","https://git.kernel.org/stable/c/e0f2ae4a7539454ec50c353571779fcda8c0cfcf"],"products":[],"source":"nvd","synced_at":"2026-10-23T16:39:28.036610720+00:00"},"epss":{"cve":"CVE-2026-98958","score":0.00174,"percentile":0.06825,"date":"2026-10-26"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}