Race condition in Linux kernel - CVE-2026-68404

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU141655

Race condition in Linux kernel - CVE-2026-68404

Published: August 12, 2026


Vulnerability identifier: #VU141655
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-68404
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a race condition in nl80211_netlink_notify() and cfg80211 wireless device autodisconnect handling when releasing a NETLINK_GENERIC socket that owns a connection. A local user can release a crafted netlink socket to cause a denial of service.

The issue occurs because autodisconnect work can be queued after teardown has cancelled pending work and after the wireless device has been removed from the device list.


Affected software

Linux kernel
Debian Linux
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
openEuler
Ubuntu
linux-nvidia-tegra (Ubuntu package)
linux (Ubuntu package)
linux-realtime (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-aws (Ubuntu package)
linux-ibm (Ubuntu package)
linux-nvidia-bos (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oracle-7.0 (Ubuntu package)
linux-gcp-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux-gke (Ubuntu package)
linux-aws-7.0 (Ubuntu package)
linux-nvidia-7.0 (Ubuntu package)
bpftool
kernel
python3-perf-debuginfo
python3-perf
perf-debuginfo
perf
kernel-tools-devel
kernel-tools-debuginfo
kernel-tools
kernel-source
kernel-headers
kernel-devel
kernel-debugsource
kernel-debuginfo
bpftool-debuginfo
kernel (Red Hat package)
linux (Debian package)
linux-azure-7.0 (Ubuntu package)
linux-azure (Ubuntu package)

How to mitigate CVE-2026-68404

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux-nvidia-tegra (Ubuntu package) - update to 6.8.0-1036.39
linux (Ubuntu package) - update to 7.0.0-38.38
linux-realtime (Ubuntu package) - update to 7.0.0-38.38.1
linux-gcp (Ubuntu package) - update to 7.0.0-1014.14
linux-oracle (Ubuntu package) - update to 7.0.0-1013.13
linux-aws (Ubuntu package) - update to 7.0.0-1014.14
linux-ibm (Ubuntu package) - update to 7.0.0-1015.15
linux-nvidia-bos (Ubuntu package) - update to 7.0.0-2022.23
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-38.38~24.04.4
linux-oracle-7.0 (Ubuntu package) - update to 7.0.0-1013.13~24.04.1
linux-gcp-7.0 (Ubuntu package) - update to 7.0.0-1014.14~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1015.15
linux-gke (Ubuntu package) - update to 7.0.0-1008.9
linux-aws-7.0 (Ubuntu package) - update to 7.0.0-1014.14~24.04.1
linux-nvidia-7.0 (Ubuntu package) - update to 7.0.0-1024.25~24.04.1
bpftool - update to 5.10.0-334.0.0.235
kernel - update to 5.10.0-334.0.0.235
python3-perf-debuginfo - update to 5.10.0-334.0.0.235
python3-perf - update to 5.10.0-334.0.0.235
perf-debuginfo - update to 5.10.0-334.0.0.235
perf - update to 5.10.0-334.0.0.235
kernel-tools-devel - update to 5.10.0-334.0.0.235
kernel-tools-debuginfo - update to 5.10.0-334.0.0.235
kernel-tools - update to 5.10.0-334.0.0.235
kernel-source - update to 5.10.0-334.0.0.235
kernel-headers - update to 5.10.0-334.0.0.235
kernel-devel - update to 5.10.0-334.0.0.235
kernel-debugsource - update to 5.10.0-334.0.0.235
kernel-debuginfo - update to 5.10.0-334.0.0.235
bpftool-debuginfo - update to 5.10.0-334.0.0.235
kernel (Red Hat package) - update to 5.14.0-687.58.1.el9_8
linux (Debian package) - update to 6.12.115-2
linux-azure-7.0 (Ubuntu package) - addressed in versions 7.0.0-1016.16~24.04.1, 7.0.0-1017.17~24.04.1
linux-azure (Ubuntu package) - addressed in versions 7.0.0-1016.16, 7.0.0-1017.17

External References

Related Security Bulletins