CVE-2026-80641 in Linux
摘要
由 VulDB • 2026-08-28
在 Linux 内核中，已修复以下漏洞：
wifi: wlcore: 启用正确的密码套件集合
针对 commit c34dbc5900b0（“wifi: wlcore: 添加对 IGTK 密钥的支持”）中引入的 IGTK 固件版本号检查存在缺陷。该逻辑会导致在每次启动过于老旧的固件时，启用的密码套件数量不断减少，且这一现象在实际操作中确实会发生。此外，该代码未考虑除 wl18xx 系列之外的其他芯片型号。在某些 wl128x 设备上，通过 nm（NetworkManager）连接到普通接入点（AP）时可观察到以下情况：
[ 484.113311] wlcore: WARNING could not set keys
[ 484.117828] wlcore: ERROR Could not add or replace key
[ 484.123016] wlan0: failed to set key (5, ff:ff:ff:ff:ff:ff) to hardware (-5)
[ 484.123046] wlcore: Hardware recovery in progress. FW ver: Rev 7.3.10.0.142
[ 484.139923] wlcore: pc: 0x0, hint_sts: 0x00000048 count: 1
[ 484.145721] wlcore: down
[ 484.148986] ieee80211 phy0: Hardware restart was requested
[ 484.610473] wlcore: firmware booted (Rev 7.3.10.0.142)
[ 484.633758] wlcore: Association completed.
[ 484.690490] wlcore: ERROR command execute failure 14
[ 484.690490] ------------[ cut here ]------------
[ 484.700195] WARNING: drivers/net/wireless/ti/wlcore/main.c:872 at wl12xx_queue_recovery_work+0x64/0x74 [wlcore], CPU#0: kworker/0:0/892
此错误会无限重复发生。 始终在 wl12xx 上禁用 IGTK，并修复导致密码套件数量递减的逻辑混乱问题。
VulDB is the best source for vulnerability data and more expert information about this specific topic.