CVE-2026-93149

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the mac80211 hwsim stop() function when draining the data->pending queue. The process currently checks if the queue is empty using skb queue empty() before calling skb dequeue(). Because TX status handling can remove a pending frame under the queue lock between these two operations, skb dequeue() may return a NULL socket buffer (skb), which is then passed to ieee80211 free txskb(), potentially leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.