The Linux kernel vulnerability in the mac80211 WiFi component arises from unsafe list iteration during radar detection work. Specifically, the call to ieee80211_dfs_cac_cancel can free and remove the currently iterated channel context from the list, causing a slab-use-after-free error. This memory safety issue could lead to severe consequences including system crashes or arbitrary code execution. The vulnerability affects Linux kernel versions before 7.0.0-28.28.1 and impacts Ubuntu LTS versions from 16.04 through 26.04, including specialized variants such as Nvidia BlueField and Pro Realtime editions.

Successful exploitation of this vulnerability could result in high impact on confidentiality, integrity, and availability of the affected system. The slab-use-after-free error may allow attackers to execute arbitrary code, cause denial of service by crashing the kernel, or corrupt kernel memory. The CVSS vector indicates attack complexity is low, no privileges or user interaction are required, and the attack surface is adjacent network, consistent with WiFi subsystem exposure.

A fix is available in Linux kernel version 7.0.0-28.28.1 and later. Users and administrators should update to this or a later kernel version to remediate the vulnerability. Since this is a kernel-level issue, applying the official kernel update from the vendor or distribution is the recommended mitigation. No additional mitigations are indicated by the vendor advisory.