CVE-2026-68404

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This vulnerability involves a race condition during the process of disconnecting a wireless device, where a work item can be improperly queued after it has been cancelled. This could allow a local attacker to trigger a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact for Red Hat products because exploiting the flaw requires local user access and tight race condition timing during netlink socket closure, limiting practical exploitability. Standard Red Hat Enterprise Linux deployments typically run on server hardware without wireless network interfaces, significantly restricting exposure under default configurations. Impact is confined to systems actively operating wireless devices handled by the cfg80211 subsystem where a local user could cause a denial of service via a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.