CVE-2026-80947

CVE-2026-80947 is a use-after-free in the Linux kernel's rtl8xxxu Wi-Fi USB driver. During teardown, rtl8xxxu_stop() failed to cancel the rx_urb_wq worker, so a worker armed by active RX traffic could dereference freed priv after ieee80211_free_hw() freed it. Two races existed: schedule_work() wa...