CVE-2026-68403

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the brcmfmac WiFi driver where the brcmf sdio probe() function stores a newly allocated bus in sdiodev->bus before allocating an ordered workqueue. If the workqueue allocation fails, the system triggers a failure path that calls brcmf sdio remove(). Because brcmf sdio remove() unconditionally attempts to cancel bus->datawork before it has been initialized via INIT WORK(), an invalid work drain occurs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.