CVE-2026-97492

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/09/2026
Last modified:
24/09/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: mac80211: don&amp;#39;t call ieee80211_handle_reconfig_failure when not needed<br /> <br /> In case reconfiguration of NAN fails, we call<br /> ieee80211_handle_reconfig_failure, that marks all interfaces as not in<br /> the driver.<br /> Then, at the error path of the reconfig, cfg80211_shutdown_all_interfaces<br /> is called to destroy all the interfaces.<br /> <br /> If we have any other interface but the NAN one, for example a BSS<br /> station, then when its state (links, stations) will be removed, we<br /> won&amp;#39;t tell the driver about this, because we will think that the<br /> interfaces are not in the driver, and then drivers might remain with<br /> dangling pointers to objects like stations and links (at least for<br /> iwlwifi this is the case).<br /> <br /> ieee80211_handle_reconfig_failure is meant to be called after we cleaned<br /> up the state in the driver, there is no reason to call it for NAN<br /> reconfiguration failure.<br /> <br /> Fix the code to just warn in such a case, as we do in other error paths<br /> in reconfig where it is too complicated to rewind.

Impact