CVE-2024-40911 is a vulnerability in the Linux kernel's wifi cfg80211 subsystem where the wiphy object is not locked before calling rdev_get_station(). This can lead to a kernel NULL pointer dereference and an internal error (kernel oops) due to a race condition when a station disconnects and reconnects before delayed work is scheduled. The flaw is fixed by locking the wiphy to prevent concurrent access issues.