wifi: brcmfmac: fix P2P action frame handling without device vif

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-90345
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-17 17:17:33 UTC
Updated2026-10-21 13:20:51 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P action frame handling without device vif Some P2P action frame paths assume the P2P device vif is always available. That is not true when userspace sends non-P2P public action frames through the primary interface, or when action-frame abort runs after the P2P device vif has not been created. Fall back to the primary vif when aborting an action frame without a P2P device vif, and guard P2P device saved IE access before using it for peer channel search.

Risk And Classification

EPSS: 0.002060000 probability, percentile 0.101290000 (date 2026-10-21)

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b 66b89c6a7da47efb38a9b839c2ae221b23a1c88b git Not specified
CNA Linux Linux affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b 6641ba636bf675b2634c49fe818931cf6ca8f547 git Not specified
CNA Linux Linux affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b f334b26b884dff5d0a558dc464fa55f300868a68 git Not specified
CNA Linux Linux affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b f26e1b16904555e171292e183c3cfc1c38159fc5 git Not specified
CNA Linux Linux affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b 1b1edb9ebed49099bdc924cef49a9aea8b552199 git Not specified
CNA Linux Linux affected 3.9 Not specified
CNA Linux Linux unaffected 3.9 semver Not specified
CNA Linux Linux unaffected 6.6.160 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.114 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.57 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.6 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/6641ba636bf675b2634c49fe818931cf6ca8f547 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/66b89c6a7da47efb38a9b839c2ae221b23a1c88b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/1b1edb9ebed49099bdc924cef49a9aea8b552199 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/f26e1b16904555e171292e183c3cfc1c38159fc5 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/f334b26b884dff5d0a558dc464fa55f300868a68 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report