CVE-2026-68404

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cfg80211 module where the nl80211 netlink notify() function processes the wireless device list upon the release of a NETLINK GENERIC socket. If the socket owns a connection, the notifier queues the wdev->disconnect wk work item. Because this was implemented as a plain work struct, a NETLINK URELEASE notifier could queue the work item after a NETDEV GOING DOWN cancellation had already occurred. Subsequently, cfg80211 unregister wdev() removes the device from the list and waits for RCU readers, but synchronize net() fails to drain work queued by such readers, potentially leading to instability during teardown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.