Use-After-Free Vulnerability in Linux Kernel's cfg80211 Module

CVE-2026-68414

What is CVE-2026-68414?

A vulnerability in the Linux kernel, specifically within the cfg80211 module, leads to a use-after-free condition when concurrently handling scheduled scan requests and device unregistration. This issue arises from improper management of queued work items, potentially allowing an attacker to exploit freed memory states. The improper synchronization between removing existing scheduled scans and unregistering devices could lead to dereferencing invalid memory, potentially affecting system stability and security. Developers are advised to ensure proper cancellation of queued work items during device unregistration to mitigate risks.

References