CVE-2026-68408

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock occurs in the cfg80211 module when a netlink socket owning a PMSR session is closed. The function cfg80211 release pmsr() queues pmsr free wk to call cfg80211 pmsr process abort() asynchronously. If the interface tears down concurrently, cfg80211 pmsr wdev down() is called while holding wiphy lock and executes cancel work sync(&pmsr free wk). Because the work function also attempts to acquire wiphy lock via guard(wiphy), both threads block each other. This same condition can be triggered via cfg80211 leave locked(), which invokes cfg80211 pmsr wdev down() under wiphy lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.