CVE-2026-23420
wifi: wlcore: Fix a locking bug
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Fix a locking bug Make sure that wl->mutex is locked before it is unlocked. This has been detected by the Clang thread-safety analyzer.
INFO
Published Date :
April 3, 2026, 2:16 p.m.
Last Modified :
April 24, 2026, 3:21 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Apply the kernel patch for the locking bug.
- Ensure mutex is locked before unlocking.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-23420.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-23420 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-23420
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-23420 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-23420 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Apr. 24, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-667 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:4.19:-:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 6.19.7 *cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.17 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.130 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.77 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.203 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.167 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.19.1 up to (excluding) 5.10.253 Added Reference Type kernel.org: https://git.kernel.org/stable/c/1a1c28a08d74716f3f8e3a21c86b30d0ff13521a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/4ae8faf31b24c78653f4433298ee52813a56967a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/5feeea59ed142e15c3284d0b1a364c6786bf3487 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/72c6df8f284b3a49812ce2ac136727ace70acc7c Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/7ab511003c5ae3bf5364d7699a2e3ab1db513680 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/aca4c9e4901b01b8b985993dc7df80bd1d1338bd Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/fc404390a386404cf9822d4091ccae1f61efcbcd Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/fcef983ad88832f3aa83491a174c345de57afbbd Types: Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Apr. 18, 2026
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/4ae8faf31b24c78653f4433298ee52813a56967a Added Reference https://git.kernel.org/stable/c/fc404390a386404cf9822d4091ccae1f61efcbcd -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Apr. 03, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Fix a locking bug Make sure that wl->mutex is locked before it is unlocked. This has been detected by the Clang thread-safety analyzer. Added Reference https://git.kernel.org/stable/c/1a1c28a08d74716f3f8e3a21c86b30d0ff13521a Added Reference https://git.kernel.org/stable/c/5feeea59ed142e15c3284d0b1a364c6786bf3487 Added Reference https://git.kernel.org/stable/c/72c6df8f284b3a49812ce2ac136727ace70acc7c Added Reference https://git.kernel.org/stable/c/7ab511003c5ae3bf5364d7699a2e3ab1db513680 Added Reference https://git.kernel.org/stable/c/aca4c9e4901b01b8b985993dc7df80bd1d1338bd Added Reference https://git.kernel.org/stable/c/fcef983ad88832f3aa83491a174c345de57afbbd