CVE-2026-74411

A flaw was found in the Linux kernel's rtw89 Wi-Fi driver. An incorrect data type used for a scan index during Wi-Fi scanning on the 6GHz band can lead to an infinite loop. This can cause a kernel soft lockup, making the CPU unresponsive and ultimately leading to a system panic, effectively resulting in a Denial of Service (DoS).

This vulnerability is assessed as Moderate impact because successful exploitation is confined to causing a local kernel hang leading to a denial of service, with no compromise of system confidentiality or data integrity. Standard enterprise server deployments rarely operate wireless networking hardware, which inherently limits exposure across the majority of environments. Systems are only susceptible if equipped with compatible Realtek Wi-Fi hardware actively conducting scans across 6 GHz channels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.