In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
Callers of wdev_chandef() must hold the wiphy mutex.
But the worker cfg80211_propagate_cac_done_wk() never takes the lock. Which triggers the warning below with the mesh_peer_connected_dfs test from hostapd and not (yet) released mac80211 code changes:
WARNING: CPU: 0 PID: 495 at net/wireless/chan.c:1552 wdev_chandef+0x60/0x165 Modules linked in: CPU: 0 UID: 0 PID: 495 Comm: kworker/u4:2 Not tainted 6.14.0-rc5-wt-g03960e6f9d47 #33 13c287eeabfe1efea01c0bcc863723ab082e17cf Workqueue: cfg80211 cfg80211_propagate_cac_done_wk Stack: 00000000 00000001 ffffff00 6093267c 00000000 6002ec30 6d577c50 60037608 00000000 67e8d108 6063717b 00000000 Call Trace: [<6002ec30>] ? _printk+0x0/0x98 [<6003c2b3>] show_stack+0x10e/0x11a [<6002ec30>] ? _printk+0x0/0x98 [<60037608>] dump_stack_lvl+0x71/0xb8 [<6063717b>] ? wdev_chandef+0x60/0x165 [<6003766d>] dump_stack+0x1e/0x20 [<6005d1b7>] __warn+0x101/0x20f [<6005d3a8>] warn_slowpath_fmt+0xe3/0x15d [<600b0c5c>] ? mark_lock.part.0+0x0/0x4ec [<60751191>] ? __this_cpu_preempt_check+0x0/0x16 [<600b11a2>] ? mark_held_locks+0x5a/0x6e [<6005d2c5>] ? warn_slowpath_fmt+0x0/0x15d [<60052e53>] ? unblock_signals+0x3a/0xe7 [<60052f2d>] ? um_set_signals+0x2d/0x43 [<60751191>] ? __this_cpu_preempt_check+0x0/0x16 [<607508b2>] ? lock_is_held_type+0x207/0x21f [<6063717b>] wdev_chandef+0x60/0x165 [<605f89b4>] regulatory_propagate_dfs_state+0x247/0x43f [<60052f00>] ? um_set_signals+0x0/0x43 [<605e6bfd>] cfg80211_propagate_cac_done_wk+0x3a/0x4a [<6007e460>] process_scheduled_works+0x3bc/0x60e [<6007d0ec>] ? move_linked_works+0x4d/0x81 [<6007d120>] ? assign_work+0x0/0xaa [<6007f81f>] worker_thread+0x220/0x2dc [<600786ef>] ? set_pf_worker+0x0/0x57 [<60087c96>] ? to_kthread+0x0/0x43 [<6008ab3c>] kthread+0x2d3/0x2e2 [<6007f5ff>] ? worker_thread+0x0/0x2dc [<6006c05b>] ? calculate_sigpending+0x0/0x56 [<6003b37d>] new_thread_handler+0x4a/0x64 irq event stamp: 614611 hardirqs last enabled at (614621): [<00000000600bc96b>] __up_console_sem+0x82/0xaf hardirqs last disabled at (614630): [<00000000600bc92c>] __up_console_sem+0x43/0xaf softirqs last enabled at (614268): [<00000000606c55c6>] __ieee80211_wake_queue+0x933/0x985 softirqs last disabled at (614266): [<00000000606c52d6>] __ieee80211_wake_queue+0x643/0x985
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-livepatch-6.1.164-196.303Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra | Mar 27, 2026 | Aug 22, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 16, 2026 | Mar 16, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 15, 2026 | Aug 22, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 22, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade dtb-armUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-cavium | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-xilinxUpgrade linux-image-oracle-6.8Upgrade linux-image-gke-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-virtualUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-aws-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-azure-6.14 | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Aug 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub