Infinite Loop Vulnerability in Linux Kernel Wi-Fi Scanning

CVE-2026-74411

What is CVE-2026-74411?

This vulnerability in the Linux kernel's Wi-Fi driver (rtw89) can lead to a soft lockup during scanning on the 6GHz band. Affected systems may experience a significant performance degradation, where the CPU could remain stuck in the scanning function for over 20 seconds, ultimately causing a system panic. The faulty data type handling for the scan index triggers this infinite loop condition. Proper mitigation is necessary to avoid operational disruptions in environments relying on stable Wi-Fi connections.

References