CVE-2026-98191

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: release runtime PM ref on regdomain config failure wlcore_regdomain_config() gets a runtime PM reference before sending the regulatory-domain command. When wlcore_cmd_regdomain_config_locked() fails, the function queues recovery and returns without dropping that reference. Release the reference after handling the command result so both success and failure paths balance the preceding pm_runtime_resume_and_get(). The recovery worker takes a separate runtime PM reference and cannot release the reference held here.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 6, 2026
First seenOct 6, 2026

How to fix

Update
  • Linux Linux85ec6c451fe681ac3135dfa43a519f1404ae63ad, 3fbaae01bb7847d8b0124a8bbdb3af865e388d53, c02352e2b5a241c8da89b5f5f1a0ae4d403120ed, 05b5e297bbf46f92c80da4c2ebe67828ca0d0247, 18eb148105f1af9163f5e9758f0a7bc6ab042423, 7f1f25b2db14683ab75d0d22c00d6a75ba988b83, a6bb6ad517a0d4db33a0cac9448e3ae9f4008fb4, 8a1f3cf89ddcc700e25afe42cfad333059adcc94 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxfa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 ≤ v < 85ec6c451fe681ac3135dfa43a519f1404ae63ad, fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 ≤ v < 3fbaae01bb7847d8b0124a8bbdb3af865e388d53, fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 ≤ v < c02352e2b5a241c8da89b5f5f1a0ae4d403120ed, fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 ≤ v < 05b5e297bbf46f92c80da4c2ebe67828ca0d0247, fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 ≤ v < 18eb148105f1af9163f5e9758f0a7bc6ab042423, fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 ≤ v < 7f1f25b2db14683ab75d0d22c00d6a75ba988b83, fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 ≤ v < a6bb6ad517a0d4db33a0cac9448e3ae9f4008fb4, fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 ≤ v < 8a1f3cf89ddcc700e25afe42cfad333059adcc94, 4.1985ec6c451fe681ac3135dfa43a519f1404ae63ad, 3fbaae01bb7847d8b0124a8bbdb3af865e388d53, c02352e2b5a241c8da89b5f5f1a0ae4d403120ed, 05b5e297bbf46f92c80da4c2ebe67828ca0d0247, 18eb148105f1af9163f5e9758f0a7bc6ab042423, 7f1f25b2db14683ab75d0d22c00d6a75ba988b83, a6bb6ad517a0d4db33a0cac9448e3ae9f4008fb4, 8a1f3cf89ddcc700e25afe42cfad333059adcc94

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.