PT-2026-27701 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23336

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc2

Description The Linux kernel contains a use-after-free error within the cfg80211 shutdown all interfaces function. This issue occurs because the rfkill block work is not cancelled during wiphy unregistration. The problem was identified by Syzkaller and the Linux Verification Center.

Recommendations Update to a version newer than 6.19.0-rc2 to resolve this issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-23336

ECHO-326E-6AC3-3A84

Affected Products

Linux Kernel

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23336.json · Exploit
• https://git.kernel.org/stable/c/767d23ade706d5fa51c36168e92a9c5533c351a1 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23336 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23336 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23336 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23336 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23336 · Vendor Advisory
• https://git.kernel.org/stable/c/82a35356b5c1f75fe6a8a561db44e8d0e49da8f9 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23336 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23336 · Security Note
• https://git.kernel.org/stable/c/fa18639deab4a3662d543200c5bfc29bf4e23173 · Patch
• https://git.kernel.org/stable/c/584279ad9ff1e8e7c5494b9fce286201f7d1f9e2 · Patch
• https://osv.dev/vulnerability/CVE-2026-23336 · Vendor Advisory
• https://git.kernel.org/stable/c/cd2f52944c7b95dcdfe0d87f385a2d96458a3ae5 · Patch
• https://git.kernel.org/stable/c/eeea8da43ab86ac0a6b9cec225eec91564346940 · Patch