Skip to content

brcmfmac: PMKID needs to be passed to firmware if present#7455

Merged
pelwell merged 3 commits into
raspberrypi:rpi-6.18.yfrom
bnicolae:rpi-6.18.y
Jun 26, 2026
Merged

brcmfmac: PMKID needs to be passed to firmware if present#7455
pelwell merged 3 commits into
raspberrypi:rpi-6.18.yfrom
bnicolae:rpi-6.18.y

Conversation

@bnicolae

@bnicolae bnicolae commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

This is a fix to issue #7359. The brcmfmac driver simply ignored PMKID instead of correctly passing it to firmware. Also, zero out pmkid (to avoid leaking from the stack garbage, which may confuse the firmware).

@bnicolae bnicolae changed the title PMKID needs to be passed to firmware if present brcmfmac: PMKID needs to be passed to firmware if present Jun 25, 2026
@pelwell

pelwell commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

What a neat little patch. If you write a sentence or two on what it does and give me a Signed-off-by: <name> (<email>), I can update the commit message when it gets merged. I think your patch will live for years, and your contribution deserves to be known.

bnicolae added 2 commits June 25, 2026 21:50
External authentication during WPA3 SAE exchange ignores the PMKID and passes garbage (whatever is on the stack) downstream.
This causes latent bugs (bogus entries in the firmware's lookup tables) that lead to connectivity issues.
For example, in AP mode, a client that includes a PMKID in association frames will be rejected.
The fix sets the PMKID either to zeros or the correct value if present, ensuring no bogus entries are used downstream.

Signed-off-by: Bogdan Nicolae (bogdan.nicolae@acm.org)
@pelwell pelwell merged commit b101011 into raspberrypi:rpi-6.18.y Jun 26, 2026
@lategoodbye

Copy link
Copy Markdown
Contributor

@bnicolae Could you please send this patch upstream?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants