Linux Kernel Wifi Autodisconnect Design Flaw

CVE-2026-68404

What is CVE-2026-68404?

A design flaw in the Linux kernel's wireless subsystem was identified regarding the handling of socket releases for wireless devices. Specifically, the issue arises in the way nl80211_netlink_notify() processes NETLINK_GENERIC socket releases, leading to potential mishandling of connections. When a socket that owns a connection is released, the system queues a work item that may not be properly canceled when NETDEV_GOING_DOWN occurs. This can cause improper cleanup of the wireless device, potentially allowing for delayed disconnections and security implications. The resolution involves making the autodisconnect work a wiphy_work, which facilitates better management and ensures that pending work is canceled appropriately while maintaining mutex protections. This mitigation addresses the concerns associated with synchronization and resource management in network operations.

References