CVE-2026-68456

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the ueagle-atm driver due to the use of the asynchronous request firmware nowait() function in .probe(). The driver fails to wait for the completion of the firmware load process, including during the .disconnect() handler. If a device is unplugged while the firmware is still loading, the teardown process runs concurrently with the load operation. This can lead to unexpected conditions in kernfs when the firmware sysfs fallback mechanism (CONFIG FW LOADER USER HELPER) attempts to create a firmware subdirectory in the device directory during its removal. This issue has been identified through multiple bug reports in syzbot between 2021 and 2025.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.