CVE-2026-68327

A flaw was found in the Linux kernel's wanxl driver. During the initialization process, an error handling path in the wanxl_pci_remove_one() function can lead to a null pointer dereference. This occurs when the wanxl_reset() function attempts to access hardware resources before they are properly mapped, specifically the card->plx pointer, if an early probe failure happens. A local attacker could potentially trigger this condition, leading to a system crash and a Denial of Service (DoS).

This vulnerability is rated as Low severity because triggering it requires local access alongside specialized hardware or emulated PCI devices to induce an early probe failure, resulting solely in a local denial of service. In Red Hat Enterprise Linux environments, the wanxl driver is not enabled in default kernel builds, which prevents systems from being exposed under standard deployments. As a result, typical installations are not affected unless custom configurations explicitly compile and load this legacy network driver.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.