CVE-2026-23336

A flaw was found in the Linux kernel's cfg80211 component. This use-after-free vulnerability occurs when the rfkill_block work is not properly cancelled during the unregistration of a wireless device. A local attacker could potentially exploit this flaw, leading to a denial of service due to memory corruption.

This flaw affects systems with wireless networking. The rfkill_block work can execute after wiphy_unregister() completes, accessing freed memory in cfg80211_shutdown_all_interfaces(). The race requires specific timing between wireless device unregistration and rfkill work execution. Found by syzkaller automated testing.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.