SB2026092562 - Race condition in Linux kernel mac80211

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-93804)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause packets to be transmitted to the driver after it has been told to leave an IBSS.

The vulnerability exists due to a race condition in ieee80211_ibss_disconnect() in mac80211 when disconnecting from an IBSS while transmissions are in flight. A local user can initiate an IBSS disconnect while packets are still being transmitted to cause packets to be transmitted to the driver after it has been told to leave an IBSS.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/20a3fb5e1a95caa34896853ca17a50d21c754969
• https://git.kernel.org/stable/c/b3451e6971248250312ad32dd7f63cc9f0a925f5
• https://git.kernel.org/stable/c/d0e69d9afa59b93c30294eba89b1f15f69e91105