In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: detect stuck ECSA element in probe resp
We recently added some validation that we don't try to connect to an AP that is currently in a channel switch process, since that might want the channel to be quiet or we might not be able to connect in time to hear the switching in a beacon. This was in commit c09c4f31998b ("wifi: mac80211: don't connect to an AP while it's in a CSA process").
However, we promptly got a report that this caused new connection failures, and it turns out that the AP that we now cannot connect to is permanently advertising an extended channel switch announcement, even with quiet. The AP in question was an Asus RT-AC53, with firmware 3.0.0.4.380_10760-g21a5898.
As a first step, attempt to detect that we're dealing with such a situation, so mac80211 can use this later.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 2, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-obs-build | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub