CVE-2026-90345
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P action frame handling without device vif Some P2P action frame paths assume the P2P device vif is always available. That is not true when userspace sends non-P2P public action frames through the primary interface, or when action-frame abort runs after the P2P device vif has not been created. Fall back to the primary vif when aborting an action frame without a P2P device vif, and guard P2P device saved IE access before using it for peer channel search.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linuxfb01b8c85682e531516adf6fb632bf2ccb67ec1d, 66b89c6a7da47efb38a9b839c2ae221b23a1c88b, 6641ba636bf675b2634c49fe818931cf6ca8f547, f334b26b884dff5d0a558dc464fa55f300868a68, f26e1b16904555e171292e183c3cfc1c38159fc5, 1b1edb9ebed49099bdc924cef49a9aea8b552199 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b ≤ v < fb01b8c85682e531516adf6fb632bf2ccb67ec1d, 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b ≤ v < 66b89c6a7da47efb38a9b839c2ae221b23a1c88b, 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b ≤ v < 6641ba636bf675b2634c49fe818931cf6ca8f547, 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b ≤ v < f334b26b884dff5d0a558dc464fa55f300868a68, 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b ≤ v < f26e1b16904555e171292e183c3cfc1c38159fc5, 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b ≤ v < 1b1edb9ebed49099bdc924cef49a9aea8b552199, 3.9 | fb01b8c85682e531516adf6fb632bf2ccb67ec1d, 66b89c6a7da47efb38a9b839c2ae221b23a1c88b, 6641ba636bf675b2634c49fe818931cf6ca8f547, f334b26b884dff5d0a558dc464fa55f300868a68, f26e1b16904555e171292e183c3cfc1c38159fc5, 1b1edb9ebed49099bdc924cef49a9aea8b552199 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.