VulnerabilityPublished 25 Jun 2026Updated 21 Oct 2026

CVE-2026-53258: Linux kernel · wifi: fix leak if split 6 GHz scanning fails

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in fb8db813eba2e56ee001c9fb5c2ce2cb78c42642 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 17:30 UTC

Severity

Unrated

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS: 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in fb8db813eba2e56ee001c9fb5c2ce2cb78c42642, e8694f7cc29287e843648d1075177b9a2000d957, df44397bbd8f3a38115c9590b686787e4aaf6327 +2

Exploitation evidence

Disclosed: evidence found.
CVE published 25 Jun 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ c8cb5b854b40f2ce52ccd032fa19750f4181d5fc, < fb8db813eba2e56ee001c9fb5c2ce2cb78c42642	Fixed in fb8db813eba2e56ee001c9fb5c2ce2cb78c42642
LinuxLinux	Affected ≥ c8cb5b854b40f2ce52ccd032fa19750f4181d5fc, < e8694f7cc29287e843648d1075177b9a2000d957	Fixed in e8694f7cc29287e843648d1075177b9a2000d957
LinuxLinux	Affected ≥ c8cb5b854b40f2ce52ccd032fa19750f4181d5fc, < df44397bbd8f3a38115c9590b686787e4aaf6327	Fixed in df44397bbd8f3a38115c9590b686787e4aaf6327
LinuxLinux	Affected ≥ c8cb5b854b40f2ce52ccd032fa19750f4181d5fc, < a24134ddc18b4d440714365637d440b7121447b9	Fixed in a24134ddc18b4d440714365637d440b7121447b9
LinuxLinux	Affected ≥ c8cb5b854b40f2ce52ccd032fa19750f4181d5fc, < 87484866cae9130b97c2b356eeaea4f47b292f75	Fixed in 87484866cae9130b97c2b356eeaea4f47b292f75
LinuxLinux	Affected =5.10	Fixed in–

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz scanning fails rdev->int_scan_req is leaked if cfg80211_scan() fails. Note that it's supposed to be released at ___cfg80211_scan_done() but this doesn't happen as rdev->scan_req is NULL at that point, too, leading to the early return from the freeing function. unreferenced object 0xffff8881161d0800 (size 512): comm "wpa_supplicant", pid 379, jiffies 4294749765 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 f0 81 13 16 81 88 ff ff ................ backtrace (crc c867fdb6): kmemleak_alloc+0x89/0x90 __kmalloc_noprof+0x2fd/0x410 cfg80211_scan+0x133/0x730 nl80211_trigger_scan+0xc69/0x1cc0 genl_family_rcv_msg_doit+0x204/0x2f0 genl_rcv_msg+0x431/0x6b0 netlink_rcv_skb+0x143/0x3f0 genl_rcv+0x27/0x40 netlink_unicast+0x4f6/0x820 netlink_sendmsg+0x797/0xce0 __sock_sendmsg+0xc4/0x160 ____sys_sendmsg+0x5e4/0x890 ___sys_sendmsg+0xf8/0x180 __sys_sendmsg+0x136/0x1e0 __x64_sys_sendmsg+0x76/0xc0 x64_sys_call+0x13f0/0x17d0 Found by Linux Verification Center (linuxtesting.org).

References

Community reviews

Loading reviews…