CVE-2026-90343

A flaw was found in the Linux kernel's Wi-Fi (Wireless Fidelity) subsystem, specifically within the cfg80211 component. When a Wi-Fi Peer-to-Peer (P2P) device or Neighborhood Area Network (NAN) interface is stopped while a Passive Measurement Scan Request (PMSR) is pending, the driver may retain a stale request. This inconsistency in the driver's state could lead to unexpected behavior or resource mismanagement.

Red Hat has evaluated this vulnerability as having a Moderate severity because exploitation demands authenticated local access and concurrent execution of specific wireless peer-to-peer or neighborhood area operations during interface teardown. Standard Red Hat Enterprise Linux servers and container hosts do not typically deploy or activate wireless network interfaces, substantially curtailing attack surface exposure. In environments without operational Wi-Fi devices, the affected subsystem code paths remain unexercised and inaccessible to attackers.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.