7.8

CVE-2026-23336: linux Use After Free

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2026-23336DEBIAN-CVE-2026-23336
Published 25-03-2026Last modified 16-10-2026
Open JSON

Vulnerability summary

CVE-2026-23336 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.1% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 30 · Related 28
MGASA-2026-0097MGASA-2026-0098SUSE-SU-2026:21834-1SUSE-SU-2026:2238-1USN-8567-1USN-8574-1

Timeline

  1. 25-03-2026
    PublishedVulnerability first disclosed.
  2. 16-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There is a use-after-free error in cfg80211_shutdown_all_interfaces found by syzkaller: BUG: KASAN: use-after-free in cfg80211_shutdown_all_interfaces+0x213/0x220 Read of size 8 at addr ffff888112a78d98 by task kworker/0:5/5326 CPU: 0 UID: 0 PID: 5326 Comm: kworker/0:5 Not tainted 6.19.0-rc2 #2 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Workqueue: events cfg80211_rfkill_block_work Call Trace: <TASK> dump_stack_lvl+0x116/0x1f0 print_report+0xcd/0x630 kasan_report+0xe0/0x110 cfg80211_shutdown_all_interfaces+0x213/0x220 cfg80211_rfkill_block_work+0x1e/0x30 process_one_work+0x9cf/0x1b70 worker_thread+0x6c8/0xf10 kthread+0x3c5/0x780 ret_from_fork+0x56d/0x700 ret_from_fork_asm+0x1a/0x30 </TASK> The problem arises due to the rfkill_block work is not cancelled when wiphy is being unregistered. In order to fix the issue cancel the corresponding work in wiphy_unregister(). Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu157 products
  • linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-136.136
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1061.64
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 1f87f7d3a3b42b20f34cb03f0fd1a41c3d0e27f3, < 82a35356b5c1f75fe6a8a561db44e8d0e49da8f9 | ≥ 1f87f7d3a3b42b20f34cb03f0fd1a41c3d0e27f3, < b2e9626a9d16b9bbbd06498c9e73c93be354dc7a | ≥ 1f87f7d3a3b42b20f34cb03f0fd1a41c3d0e27f3, < eeea8da43ab86ac0a6b9cec225eec91564346940 | ≥ 1f87f7d3a3b42b20f34cb03f0fd1a41c3d0e27f3, < fa18639deab4a3662d543200c5bfc29bf4e23173 | ≥ 1f87f7d3a3b42b20f34cb03f0fd1a41c3d0e27f3, < 57e39fe8da573435fa35975f414f4dc17d9f8449 | ≥ 1f87f7d3a3b42b20f34cb03f0fd1a41c3d0e27f3, < 584279ad9ff1e8e7c5494b9fce286201f7d1f9e2 | ≥ 1f87f7d3a3b42b20f34cb03f0fd1a41c3d0e27f3, < cd2f52944c7b95dcdfe0d87f385a2d96458a3ae5 | ≥ 1f87f7d3a3b42b20f34cb03f0fd1a41c3d0e27f3, < 767d23ade706d5fa51c36168e92a9c5533c351a1 | 2.6.31
  • linux_kernel≥ 2.6.31.1, < 5.10.253 | ≥ 5.11, < 5.15.203 | ≥ 5.16, < 6.1.167 | ≥ 6.2, < 6.6.130 | ≥ 6.7, < 6.12.77 | ≥ 6.13, < 6.18.17 | ≥ 6.19, < 6.19.7 | 2.6.31 | 7.0:rc1 | 7.0:rc2 | 7.0:rc3 | 7.0:rc4 | 7.0:rc5 | 7.0:rc6 | 7.0:rc7
Debian1 product
  • linux< 6.1.170-1 | < 6.12.85-1 | < 6.19.8-1

3 vendors · 160 products

References

40 links
Show all 40 references