CVE-2026-90345

A flaw was found in the brcmfmac Wi-Fi driver in the Linux kernel. This vulnerability occurs because certain paths for handling Wi-Fi Peer-to-Peer (P2P) action frames incorrectly assume that a P2P device virtual interface (vif) is always present. A local attacker could potentially send specially crafted non-P2P public action frames, or trigger an action-frame abort after the P2P device vif has been removed, leading to a system crash and a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.