Use-After-Free Vulnerability in Linux Kernel's cfg80211 Component

CVE-2026-23336

What is CVE-2026-23336?

A use-after-free error has been identified in the Linux kernel's cfg80211 component, specifically in the shutdown of all wireless interfaces. This issue occurs when the rfkill_block work is not properly canceled during the unregistration of the wiphy, potentially leading to system instability or security risks. The vulnerability was discovered by the Linux Verification Center using Syzkaller.

References