CVE-2026-90346wifi: nl80211: clean up color-change beacon data on errors
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: clean up color-change beacon data on errors nl80211_color_change() calls nl80211_parse_beacon() for the beacon_next template, which can allocate params.beacon_next.mbssid_ies and .rnr_ies. A parsing failure returned directly instead of using the out: cleanup, leaking any allocations completed before the error. Allocate the nested attribute table before parsing beacon_next. Its allocation failure can then return before beacon data exists, while a later parsing failure uses out: to release the parsed data.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from dc1e3cb8da8b414b37208b2fb6755fef8122504b before 0ec1d14cf302ae7c23ec218527b2849a1fced3f4; from dc1e3cb8da8b414b37208b2fb6755fef8122504b before 4e0a67fbe3d9e2e1d6f81dfc607184c6b0abd3dd; from dc1e3cb8da8b414b37208b2fb6755fef8122504b before 927ee844c47ac2aef22c8f7a35f098ff576b398b | CNA record |
References
- https://git.kernel.org/stable/c/0ec1d14cf302ae7c23ec218527b2849a1fced3f4
- https://git.kernel.org/stable/c/4e0a67fbe3d9e2e1d6f81dfc607184c6b0abd3dd
- https://git.kernel.org/stable/c/927ee844c47ac2aef22c8f7a35f098ff576b398b
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.