[PATCH v2 3/4] network: remove PMKSA entries on known network removal

James Prestwood
2026-03-24T19:21:00Z

If a known network is removed we should also flush any PMKSA entries
associated with that network. Without doing this it would permit IWD
allow connect to that network later which would be confusing to the
user since they explicitly removed the network.
---
src/network.c | 5 +++++
1 file changed, 5 insertions(+)

diff --git a/src/network.c b/src/network.c
index a5a2375a..2d67383f 100644
--- a/src/network.c
+++ b/src/network.c
@@ -58,6 +58,7 @@
#include "src/handshake.h"
#include "src/band.h"
#include "src/util.h"
+#include "src/pmksa.h"

#define SAE_PT_SETTING "SAE-PT-Group%u"

@@ -2051,6 +2052,10 @@ static void emit_known_network_removed(struct station *station, void *user_data)

l_queue_destroy(network->secrets, eap_secret_info_free);
network->secrets = NULL;
+
+ pmksa_cache_flush_ssid((uint8_t *)info->ssid,
+ sizeof(info->ssid),
+ security_to_akms(network->security));
}

connected_network = station_get_connected_network(station);
--
2.34.1