[PATCH 1/2] RSN: Honor PMKSA flush address

Andrei Otcheretianski andrei.otcheretianski at intel.com
Thu Oct 29 06:32:02 PDT 2026


From: Daniel Gabay <daniel.gabay at intel.com>

pmksa_cache_flush() ignored the address argument, so the SAE
association rejection and reason code 9 deauthentication handlers
flushed the PMKSA cache entries of the full ESS instead of only the
entry of the AP that rejected PMKSA caching.

Fixes: e6dbaa673f39 ("SAE: Limit PMKSA flushing on failure to the current BSS")

Signed-off-by: Daniel Gabay <daniel.gabay at intel.com>
---
 src/rsn_supp/pmksa_cache.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/rsn_supp/pmksa_cache.c b/src/rsn_supp/pmksa_cache.c
index be965fcf59..6857a53e6e 100644
--- a/src/rsn_supp/pmksa_cache.c
+++ b/src/rsn_supp/pmksa_cache.c
@@ -499,6 +499,7 @@ void pmksa_cache_flush(struct rsn_pmksa_cache *pmksa, void *network_ctx,
 	while (entry) {
 		if ((entry->network_ctx == network_ctx ||
 		     network_ctx == NULL) &&
+		    (!addr || ether_addr_equal(entry->aa, addr)) &&
 		    (pmk == NULL ||
 		     (pmk_len == entry->pmk_len &&
 		      os_memcmp(pmk, entry->pmk, pmk_len) == 0)) &&
-- 
2.53.0




More information about the Hostap mailing list