Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux Kernel WiFi Driver: Work Not Cleared on Disconnection
CVE-2026-23185
Summary
The Linux kernel's WiFi driver has a bug that can cause issues when the WiFi connection is disconnected. This can lead to problems with device initialization and memory errors. To fix this, update your Linux kernel to the latest version to resolve this issue.
Original title
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mld: cancel mlo_scan_start_wk
mlo_scan_start_wk is not canceled on disconnection. In fact, it is not
canceled an...
Original description
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mld: cancel mlo_scan_start_wk
mlo_scan_start_wk is not canceled on disconnection. In fact, it is not
canceled anywhere except in the restart cleanup, where we don't really
have to.
This can cause an init-after-queue issue: if, for example, the work was
queued and then drv_change_interface got executed.
This can also cause use-after-free: if the work is executed after the
vif is freed.
wifi: iwlwifi: mld: cancel mlo_scan_start_wk
mlo_scan_start_wk is not canceled on disconnection. In fact, it is not
canceled anywhere except in the restart cleanup, where we don't really
have to.
This can cause an init-after-queue issue: if, for example, the work was
queued and then drv_change_interface got executed.
This can also cause use-after-free: if the work is executed after the
vif is freed.
Published: 14 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026