Linux Kernel Vulnerability in Wi-Fi Driver by Vendor

CVE-2026-74412

What is CVE-2026-74412?

A vulnerability has been identified in the Wi-Fi driver (rtw88) within the Linux kernel, where a type confusion occurs due to an incorrect handling of driver data types. The ieee80211_hw pointer is stored using pci_set_drvdata() at probe time, but is incorrectly retrieved as a net_device pointer during operations like io_error_detected() and io_resume(). This mismatch can lead to misoperations during netif_device_detach/attach processes, potentially causing data corruption or crashes. The issue has been addressed by ensuring that ieee80211_stop_queues and wake_queues are consistently used in line with standard queue operations, thus enhancing the overall stability and reliability of the driver.

References