CVE-2026-68408 wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: convert pmsrfreewk to wiphywork to fix deadlock When a netlink socket that owns a PMSR session is closed, cfg80211releasepmsr clears the request's nlportid and queues pmsrfreewk to call cfg80211pmsrprocessabort...

CVE-2026-68408 wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: convert pmsrfreewk to wiphywork to fix deadlock When a netlink socket that owns a PMSR session is closed, cfg80211releasepmsr clears the request's nlportid and queues pmsrfreewk to call cfg80211pmsrprocessabort...

CVE-2026-68408

The CVE affects the Linux kernel cfg80211/pmsr handling in wifi: the deadlock occurred when a PMSR session was closed during device teardown: wdev_down held wiphy_lock, while pmsr_free_wk waited to acquire the same lock via cancel_work_sync. The fix converts pmsr_free_wk from a plain work_struct ...

CVE-2026-68406 wifi: cfg80211: validate PMSR FTM preamble range

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject out-of-range values before using them in the parser capability bit test using...

Linux Distros Unpatched Vulnerability : CVE-2026-68408

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: convert pmsrfreewk to wiphywork to fix deadlock When a netlink socket that owns a PMSR session is closed, cfg80211releasepmsr clears the...

Linux Distros Unpatched Vulnerability : CVE-2026-68406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject...

PT-2026-69808

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the cfg80211 module when a netlink socket owning a PMSR session is closed. The function cfg80211 release pmsr queues pmsr free wk to call cfg80211 pmsr process abort...

PT-2026-69806

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cfg80211 module where PMSR FTM request parsing accepts preamble values that fall outside the enumerated nl80211 preamble range. This occurs because the system fail...

CVE-2026-68406: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject out-of-range values before using them in the parser capability bit test using...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Convert pmsrfreewk to wiphywork to avoid deadlock. When a netlink socket that owns a PMSR session is closed, cfg80211releasepmsr clears the request’s nlportid and queues pmsrfreewk to call cfg80211pmsrprocessabort...

DEBIAN-CVE-2026-31548

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsrfreewk in cfg80211pmsrwdevdown When the nl80211 socket that originated a PMSR request is closed, cfg80211releasepmsr sets the request's nlportid to zero and schedules pmsrfreewk to process the abort...

CVE-2026-31548

CVE-2026-31548 (Linux kernel, wifi/cfg80211) : A race during interface teardown can cause a pending pmsr_free_wk work item to run after the interface has been removed, leading to undefined behavior or crashes if the driver abort_pmsr callback is invoked on a torn-down interface. The advisory stat...

CVE-2026-31548

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsrfreewk in cfg80211pmsrwdevdown When the nl80211 socket that originated a PMSR request is closed, cfg80211releasepmsr sets the request's nlportid to zero and schedules pmsrfreewk to process the abort...

Linux Distros Unpatched Vulnerability : CVE-2026-31548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: cancel pmsrfreewk in cfg80211pmsrwdevdown When the nl80211 socket that originated a PMSR request is closed, cfg80211releasepmsr sets the request...

CVE-2024-43876 PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

PT-2024-30733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A link problem in the Linux kernel has been resolved by demoting WARN to dev warn ratelimited in rcar pcie wakeup. This issue occurs when an ASMedia ASM1062 PCIe SATA controller, which...