What’s Vulnerable › Vulnerabilities

CVE-2026-23420: wifi: wlcore: Fix a locking bug

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-03 · updated 2026-07-24
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Fix a locking bug Make sure that wl->mutex is locked before it is unlocked. This has been detected by the Clang thread-safety analyzer.

Affected products

• Linux kernel: from 4.19.1 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.167; from 6.2 before 6.6.130; from 6.7 before 6.12.77; from 6.13 before 6.18.17 — fixed in 5.10.253, 5.15.203, 6.1.167, 6.12.77, 6.18.17, 6.19.7

How to fix

Upgrade to a fixed version: Linux kernel 5.10.253, 5.15.203, 6.1.167, 6.12.77. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1a1c28a08d74716f3f8e3a21c86b30d0ff13521a
• https://git.kernel.org/stable/c/4ae8faf31b24c78653f4433298ee52813a56967a
• https://git.kernel.org/stable/c/5feeea59ed142e15c3284d0b1a364c6786bf3487
• https://git.kernel.org/stable/c/72c6df8f284b3a49812ce2ac136727ace70acc7c
• https://git.kernel.org/stable/c/7ab511003c5ae3bf5364d7699a2e3ab1db513680
• https://git.kernel.org/stable/c/aca4c9e4901b01b8b985993dc7df80bd1d1338bd
• https://git.kernel.org/stable/c/fc404390a386404cf9822d4091ccae1f61efcbcd
• https://git.kernel.org/stable/c/fcef983ad88832f3aa83491a174c345de57afbbd

Get alerted when CVE-2026-23420 or the next vulnerability affects your stack