Linux Kernel Vulnerability in rtw89 Driver Affecting Wireless Functionality

CVE-2026-74413

What is CVE-2026-74413?

A vulnerability in the Linux kernel's rtw89 driver occurs due to the incorrect data type being retrieved in AER handlers. Specifically, while the driver stores an ieee80211_hw pointer using pci_set_drvdata() during the probe phase, the io_error_detected() and io_resume() functions incorrectly attempt to access this data as a net_device pointer. This mismatch leads to the netif_device_detach and netif_device_attach functions operating on incorrect data structures, potentially causing system instability. The vulnerability has been addressed by ensuring that ieee80211_stop_queues and wake_queues are utilized properly, aligning the driver’s operations with standard protocols tested on RTL8852CE.

References