CVE-2026-90343

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cfg80211 module where PMSR (Passive Measurement Service Request) request teardown fails to abort active measurements before the wireless dev is removed from the driver during P2P or NAN teardown. This occurs because the functions cfg80211 stop p2p device() and cfg80211 stop nan() do not trigger the necessary abort sequence. When these helpers are called via nl80211, rfkill shutdown, or wireless dev unregister paths, the mac80211 subinterface is removed first, preventing the cleanup process from reaching the lower driver's abort callback. Consequently, the driver may retain a stale request and incorrectly use it when reporting a result.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.