Riskcovery

CVE-2026-90344

wifi: mac80211: disconnect on CSA to channel 0

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: disconnect on CSA to channel 0

The refactor for the CSA parsing erroneously equates channel zero and no information present, leading it to ignore a CSA on an AP that advertises a switch to that (invalid) channel. This leads to not disconnecting, which we should. For Intel devices, this can lead to a firmware crash.

Fix this by using an int type for the channel number as well as the opclass, and using a (negative) value that cannot be encoded in the element to indicate it's not present.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 21c3f8f95554feff9bed15703e89adbe582e0383 to before 099aadb2012d7490bc584cc5075ef11cbc33f2c3Affected
  • 21c3f8f95554feff9bed15703e89adbe582e0383 to before e7bc5ab93acd1c3f54feeb9fa19ead3530168090Affected
  • 21c3f8f95554feff9bed15703e89adbe582e0383 to before eef374088450bb91626e133c7172b8a0e969a522Affected
  • 21c3f8f95554feff9bed15703e89adbe582e0383 to before cf57f0a674cc3e3cda1a789359cc1238b61b9d7dAffected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.