CVE-2026-23336

wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()

CVE-2026-23336 is fixed in 46 products on 1 platform, first by DEBIAN-CVE-2026-23336, released March 25, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0014
3rd percentile

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-after-free error in cfg80211_shutdown_all_interfaces found by syzkaller: BUG: KASAN: use-after-free in cfg80211_shutdown_all_interfaces+0x213/0x220 Read of size 8 at addr ffff888112a78d98 by task kworker/0:5/5326 CPU: 0 UID: 0 PID: 5326 Comm: kworker/0:5 Not tainted 6.19.0-rc2 #2 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Workqueue: events cfg80211_rfkill_block_work Call Trace: <TASK> dump_stack_lvl+0x116/0x1f0 print_report+0xcd/0x630 kasan_report+0xe0/0x110 cfg80211_shutdown_all_interfaces+0x213/0x220 cfg80211_rfkill_block_work+0x1e/0x30 process_one_work+0x9cf/0x1b70 worker_thread+0x6c8/0xf10 kthread+0x3c5/0x780 ret_from_fork+0x56d/0x700 ret_from_fork_asm+0x1a/0x30 </TASK> The problem arises due to the rfkill_block work is not cancelled when wiphy is being unregistered. In order to fix the issue cancel the corresponding work in wiphy_unregister(). Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

Where it's fixed

ProductFixed inFixReleased
Linux
kernel-64kb · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-azure · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-default · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.55.1.150700.17.33.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-livepatch-SLE15-SP7_Update_15 · sles 15.7 1-150700.15.3.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-source · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-uek · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-core · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-core · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-core · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-core · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-devel · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-devel · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-core · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-core · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-deprecated · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-deprecated · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-desktop · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-desktop · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-extra · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-extra · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-extra-netfilter · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-extra-netfilter · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-usb · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-usb · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-wireless · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-debug-modules-wireless · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-devel · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-devel · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-doc · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-doc · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-core · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-core · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-deprecated · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-deprecated · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-desktop · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-desktop · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-extra · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-extra · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-extra-netfilter · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-extra-netfilter · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-usb · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-usb · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-wireless · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-modules-wireless · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-tools · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek-tools · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-core · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-core · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-devel · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-devel · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-core · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-core · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-deprecated · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-deprecated · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-desktop · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-desktop · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-extra · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-extra · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-extra-netfilter · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-extra-netfilter · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-usb · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-usb · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-wireless · ol 10 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-uek64k-modules-wireless · ol 9 0:6.12.0-204.92.4.2.el9uek ELSA-2026-50372 Jul 2, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
linux · Debian 12.15 (bookworm) 6.1.170-1 DEBIAN-CVE-2026-23336 Mar 25, 2026
linux · Debian 13.5 (trixie) 6.12.85-1 DEBIAN-CVE-2026-23336 Mar 25, 2026
linux · Debian 14 6.19.8-1 DEBIAN-CVE-2026-23336 Mar 25, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.