CVE-2026-98191

wifi: wlcore: release runtime PM ref on regdomain config failure

State: Published
Severity: Not scored
Published: Oct 6, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: wlcore: release runtime PM ref on regdomain config failure

wlcore_regdomain_config() gets a runtime PM reference before sending the regulatory-domain command. When wlcore_cmd_regdomain_config_locked() fails, the function queues recovery and returns without dropping that reference.

Release the reference after handling the command result so both success and failure paths balance the preceding pm_runtime_resume_and_get(). The recovery worker takes a separate runtime PM reference and cannot release the reference held here.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 85ec6c451fe681ac3135dfa43a519f1404ae63adAffected fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 3fbaae01bb7847d8b0124a8bbdb3af865e388d53Affected fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before c02352e2b5a241c8da89b5f5f1a0ae4d403120edAffected fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 05b5e297bbf46f92c80da4c2ebe67828ca0d0247Affected fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 18eb148105f1af9163f5e9758f0a7bc6ab042423Affected fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 7f1f25b2db14683ab75d0d22c00d6a75ba988b83Affected fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before a6bb6ad517a0d4db33a0cac9448e3ae9f4008fb4Affected fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 8a1f3cf89ddcc700e25afe42cfad333059adcc94Affected
LinuxLinux	4.19Affected before 4.19Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.54 through 6.18.Not affected 7.2.8 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 85ec6c451fe681ac3135dfa43a519f1404ae63adAffected
fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 3fbaae01bb7847d8b0124a8bbdb3af865e388d53Affected
fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before c02352e2b5a241c8da89b5f5f1a0ae4d403120edAffected
fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 05b5e297bbf46f92c80da4c2ebe67828ca0d0247Affected
fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 18eb148105f1af9163f5e9758f0a7bc6ab042423Affected
fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 7f1f25b2db14683ab75d0d22c00d6a75ba988b83Affected
fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before a6bb6ad517a0d4db33a0cac9448e3ae9f4008fb4Affected
fa2648a34e73fb7a17fd0a82e0335a9451d8f5c8 to before 8a1f3cf89ddcc700e25afe42cfad333059adcc94Affected

LinuxLinux

4.19Affected
before 4.19Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.54 through 6.18.*Not affected
7.2.8 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.