Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-after-free error in cfg80211_shutdown_all_interfaces found by syzkaller: BUG: KASAN: use-after-free in cfg80211_shutdown_all_interfaces+0x213/0x220 Read of size 8 at addr ffff888112a78d98 by task kworker/0:5/5326 CPU: 0 UID: 0 PID: 5326 Comm: kworker/0:5 Not tainted 6.19.0-rc2 #2 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Workqueue: events cfg80211_rfkill_block_work Call Trace: <TASK> dump_stack_lvl+0x116/0x1f0 print_report+0xcd/0x630 kasan_report+0xe0/0x110 cfg80211_shutdown_all_interfaces+0x213/0x220 cfg80211_rfkill_block_work+0x1e/0x30 process_one_work+0x9cf/0x1b70 worker_thread+0x6c8/0xf10 kthread+0x3c5/0x780 ret_from_fork+0x56d/0x700 ret_from_fork_asm+0x1a/0x30 </TASK> The problem arises due to the rfkill_block work is not cancelled when wiphy is being unregistered. In order to fix the issue cancel the corresponding work in wiphy_unregister(). Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Patch1 |
| 2026-03-26 | 1 | Disclosure1 |
| 2026-03-27 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-23336 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23336 #CVE-2026-23336 #CVE #CyberSecurity #InfoSec https://t.co/arKAODSwV2
Post summary
A brief tweet announces CVE-2026-23336 with minimal information and no evidence of exploits, patches, or technical detail.
😈 Another “small” kernel race turns into a Wi‑Fi UAF? Cancel pending work in wiphy_unregister sounds easy… until cleanup paths eat your security. Fix it, don’t “hope.” https://windowsforum.com/threads/cve-2026-23336-wi-fi-cfg80211-rfkill-uaf-fix-work-cancel-in-wiphy_unregister.407431/ #Cfg80211 #LinuxKernelSecurity #UseAfterFree #Rfkill https://t.co/xgicH4hjUf
Post summary
The post announces a kernel race that turns into a Wi‑Fi use‑after‑free vulnerability, offering technical hints but no exploit, patch details, or mention of active exploitation.
CVE-2026-23336 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-after-free error i… https://www.cve.org/CVERecord?id=CVE-2026-23336
Post summary
The Linux kernel CVE‑2026‑23336 involves a use‑after‑free error in cfg80211 and has been fixed, though the specifics of the fix or vendor guidance are not disclosed.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 2.6.31 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |