Strix
64.2K

CVE-2026-90344

Unknown

Last modified

CVE-2026-90344 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The refactor for the CSA parsing erroneously equates channel zero and no information present, leading it to ignore a CSA on an AP that advertises a switch to that (invalid) channel. This leads to not disconnecting, which we should. For Intel devices, this can lead to a firmware crash. Fix this by using an int type for the channel number as well as the opclass, and using a (negative) value that cannot be encoded in the element to indicate it's not present..

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The refactor for the CSA parsing erroneously equates channel zero and no information present, leading it to ignore a CSA on an AP that advertises a switch to that (invalid) channel. This leads to not disconnecting, which we should. For Intel devices, this can lead to a firmware crash. Fix this by using an int type for the channel number as well as the opclass, and using a (negative) value that cannot be encoded in the element to indicate it's not present.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 21c3f8f95554feff9bed15703e89adbe582e0383, < 099aadb2012d7490bc584cc5075ef11cbc33f2c3; >= 21c3f8f95554feff9bed15703e89adbe582e0383, < e7bc5ab93acd1c3f54feeb9fa19ead3530168090; >= 21c3f8f95554feff9bed15703e89adbe582e0383, < eef374088450bb91626e133c7172b8a0e969a522; >= 21c3f8f95554feff9bed15703e89adbe582e0383, < cf57f0a674cc3e3cda1a789359cc1238b61b9d7d
LinuxLinux6.9

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-90344?
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The refactor for the CSA parsing erroneously equates channel zero and no information present, leading it to ignore a CSA on an AP that advertises a switch to that (invalid) channel. This leads to not disconnecting, which we should. For Intel devices, this can lead to a firmware crash. Fix this by using an int type for the channel number as well as the opclass, and using a (negative) value that cannot be encoded in the element to indicate it's not present.
How severe is CVE-2026-90344?
Severity scoring for CVE-2026-90344 is pending analysis.
How do I fix CVE-2026-90344?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-90344?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST