CVE-2026-23185

Severity
7.8HIGH
EPSS
0.0%
top 96.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 14

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo_scan_start_wk mlo_scan_start_wk is not canceled on disconnection. In fact, it is not canceled anywhere except in the restart cleanup, where we don't really have to. This can cause an init-after-queue issue: if, for example, the work was queued and then drv_change_interface got executed. This can also cause use-after-free: if the work is executed after the vif is freed.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

NVDlinux/linux_kernel6.176.18.10+1
CVEListV5linux/linux9748ad82a9d92b036ff3115207e36e2b9932e3549b9f52f052f4953fecd2190ae2dde3aa76d10962+2
Debianlinux< 6.18.10-1

Patches

🔴Vulnerability Details

3
OSV
CVE-2026-23185: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo_scan_start_wk mlo_scan_start_wk is not canceled on2026-02-14
CVEList
wifi: iwlwifi: mld: cancel mlo_scan_start_wk2026-02-14
GHSA
GHSA-3jpp-f2wm-pcvv: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: cancel mlo_scan_start_wk mlo_scan_start_wk is not canceled o2026-02-14

📋Vendor Advisories

2
Red Hat
kernel: wifi: iwlwifi: mld: cancel mlo_scan_start_wk2026-02-14
Debian
CVE-2026-23185: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwi...2026

🕵️Threat Intelligence

1
Wiz
CVE-2026-23185 Impact, Exploitability, and Mitigation Steps | Wiz
CVE-2026-23185 (HIGH CVSS 7.8) | In the Linux kernel | cvebase.io