CVE-2026-68403

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. During the driver's initialization and cleanup process, an uninitialized work item could be accessed and cancelled. This issue occurs if a specific memory allocation fails, leading to an invalid work drain. A local attacker could potentially trigger this condition, resulting in a system crash and a Denial of Service (DoS).

This vulnerability is rated as having Low severity because triggering it requires the presence of specific Broadcom SDIO wireless hardware, which is uncommon in standard enterprise server environments. Exploitation additionally relies on an early memory allocation failure during device probe, a condition that cannot be reliably forced by an unprivileged local user. Consequently, the operational exposure and blast radius in typical Red Hat installations remain minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.