CVE-2026-53112Patch(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet The irq_prepare_bcn_tasklet is initialized in rtl_pci_init() and scheduled when RTL_IMR_BCNINT interrupt is triggered by hardware. But it is never killed in rtl_pci_deinit(). When the rtlwifi card probe fails or is being detached, the ieee80211_hw is deallocated. However, irq_prepare_bcn_tasklet may still be running or pending, leading to use-after-free when the freed ieee80211_hw is accessed in _rtl_pci_prepare_bcn_tasklet(). Similar to irq_tasklet, add tasklet_kill() in rtl_pci_deinit() to ensure that irq_prepare_bcn_tasklet is properly terminated before the ieee80211_hw is released. The issue was identified through static analysis.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
Products
linux_kernel

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-06-24: 3Patch / Workaround · 2026-06-24: 1Technical Details · 2026-06-24: 306-24
Signal classification2 categories
Patch
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-53112 Use-After-Free in Linux Kernel rtlwifi PCI Driver Tasklet Handling https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53112

    Post summary

    The snippet merely cites a Linux kernel CVE with a brief vulnerability type and provides a link, offering no further detail on exploitation, patching, or PoC.

    00000115
    4.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-53112 In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet The… https://www.cve.org/CVERecord?id=CVE-2026-53112 ----- Traducción: CVE-2026-53112 En … http://infoflow.cloud`

    Post summary

    The post announces that CVE‑2026‑53112, a use‑after‑free flaw in rtlwifi, has been fixed, but provides no PoC, exploit, or active exploitation evidence.

    0000031
    88 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-53112 In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet The… https://www.cve.org/CVERecord?id=CVE-2026-53112

    Post summary

    CVE‑2026‑53112 was fixed in the Linux kernel with a patch addressing a use‑after‑free in rtlwifi; no exploit, PoC or active exploitation is mentioned.

    000001.1K
    57.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---

Explore more