CVE Database›Document archive›CVE-2026-72005

CVE-2026-72005

kernel: wifi: rt2x00: avoid full teardown before work setup in probe

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 15, 2026

Updated · October 30, 2026

Description

A flaw was found in the rt2x00 WiFi driver within the Linux kernel. During the device probing process, if memory or workqueue allocations fail prematurely, the system attempts a full device teardown. This teardown incorrectly assumes that certain work items have been initialized, leading to invalid operations. An attacker could potentially exploit this vulnerability to trigger a system crash, resulting in a Denial of Service (DoS).

Statement

This vulnerability is rated as having a Low severity for Red Hat Enterprise Linux because exploitation requires attaching specific Ralink wireless hardware alongside induced resource allocation failures during driver initialization. Typical enterprise and server installations do not utilize these wireless network adapters, greatly restricting real-world exposure. Even on systems where compatible hardware is introduced, the flaw cannot be triggered without premature allocation exhaustion during probe routines, bounding the overall risk to local denial of service.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-908 · Use of Uninitialized Resource