CVE-2026-97492
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/09/2026
Last modified:
24/09/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: mac80211: don&#39;t call ieee80211_handle_reconfig_failure when not needed<br />
<br />
In case reconfiguration of NAN fails, we call<br />
ieee80211_handle_reconfig_failure, that marks all interfaces as not in<br />
the driver.<br />
Then, at the error path of the reconfig, cfg80211_shutdown_all_interfaces<br />
is called to destroy all the interfaces.<br />
<br />
If we have any other interface but the NAN one, for example a BSS<br />
station, then when its state (links, stations) will be removed, we<br />
won&#39;t tell the driver about this, because we will think that the<br />
interfaces are not in the driver, and then drivers might remain with<br />
dangling pointers to objects like stations and links (at least for<br />
iwlwifi this is the case).<br />
<br />
ieee80211_handle_reconfig_failure is meant to be called after we cleaned<br />
up the state in the driver, there is no reason to call it for NAN<br />
reconfiguration failure.<br />
<br />
Fix the code to just warn in such a case, as we do in other error paths<br />
in reconfig where it is too complicated to rewind.


