CVE-2026-68409

The CVE concerns the Linux kernel’s mac80211 layer. sta_remove_link frees a removed MLO link’s RX stats percpu buffer immediately but quarantines only the link container to RCU, allowing readers to access a now-freed percpu block via link_sta. The race occurs because the per-CPU RX stats memory c...