CVE-2026-98195

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlegacy: fix broadcast stations deallocation

On the error path of il4965 up(), il dealloc bcast stations() clears only IL STA UCODE ACTIVE, leaving IL STA BCAST set. This causes the same broadcast stations to be deallocated again by il4965 down().

This can occur when RF KILL is toggled during driver startup.

To fix clear the entire 'used' field, since we will not do any other operations on the station.