PT-2026-106662 · Linux · Linux

CVE-2026-98333

·

Published

2026-10-06

·

Updated

2026-10-06

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: reset the LED state when ifup fails
When the first interface comes up, the radio LED is turned on. This can start the TPT trigger timer, which continues running.
But if bringing up the interface fails then the timer keeps running and won't be stopped by anything, eventually it can be freed:
ODEBUG: free active (active state 0) object: ffff888127e12130 object type: timer list hint: tpt trig timer+0x0/0x300 net/mac80211/led.c:145 WARNING: CPU: 0 PID: 5923 at lib/debugobjects.c:612 debug print object+0x1a2/0x2b0 debug check no obj freed+0x4b7/0x600 lib/debugobjects.c:1129 kfree+0x436/0x670 mm/slub.c:6818 ieee80211 led exit+0x162/0x1c0 net/mac80211/led.c:210 ieee80211 unregister hw+0x27e/0x3a0 net/mac80211/main.c:1706 rt2x00lib remove dev+0x55b/0x670
Undo the LED state in the error path.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-98333

Affected Products

Linux