[PATCH 1/2] RSN: Honor PMKSA flush address
Andrei Otcheretianski
andrei.otcheretianski at intel.com
Thu Oct 29 06:32:02 PDT 2026
From: Daniel Gabay <daniel.gabay at intel.com>
pmksa_cache_flush() ignored the address argument, so the SAE
association rejection and reason code 9 deauthentication handlers
flushed the PMKSA cache entries of the full ESS instead of only the
entry of the AP that rejected PMKSA caching.
Fixes: e6dbaa673f39 ("SAE: Limit PMKSA flushing on failure to the current BSS")
Signed-off-by: Daniel Gabay <daniel.gabay at intel.com>
---
src/rsn_supp/pmksa_cache.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/rsn_supp/pmksa_cache.c b/src/rsn_supp/pmksa_cache.c
index be965fcf59..6857a53e6e 100644
--- a/src/rsn_supp/pmksa_cache.c
+++ b/src/rsn_supp/pmksa_cache.c
@@ -499,6 +499,7 @@ void pmksa_cache_flush(struct rsn_pmksa_cache *pmksa, void *network_ctx,
while (entry) {
if ((entry->network_ctx == network_ctx ||
network_ctx == NULL) &&
+ (!addr || ether_addr_equal(entry->aa, addr)) &&
(pmk == NULL ||
(pmk_len == entry->pmk_len &&
os_memcmp(pmk, entry->pmk, pmk_len) == 0)) &&
--
2.53.0
More information about the Hostap
mailing list