Linux Kernel Vulnerability in AP_VLAN Management

CVE-2026-68405

What is CVE-2026-68405?

A vulnerability exists in the Linux kernel's handling of AP_VLAN packets during the stopping process. In the ieee80211_do_stop() function, packets are improperly managed while holding a lock with interrupts disabled. This can lead to conditions where packets queued for transmission are not handled correctly, potentially resulting in dropped packets and related issues in packet reporting mechanisms. The correct sequence should ensure locks are released before freeing packet buffers to prevent unexpected behavior and maintain system stability.

References