CVE-2026-23040

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211_hwsim: fix typo in frequency notification

The NAN notification is for 5745 MHz which corresponds to channel 149 and not 5475 which is not actually a valid channel. This could result in a NULL pointer dereference in cfg80211_next_nan_dw_notif.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= a37a6f54439bf82b827a7072415d3a4afa4e12bd, < 1251bbdb8f5b2ea86ca9b4268a2e6aa34372ab33; >= a37a6f54439bf82b827a7072415d3a4afa4e12bd, < 333418872bfecf4843f1ded7a4151685dfcf07d5
LinuxLinux6.18

References

Timeline

Published
Feb 4, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-23041In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable during error cleanupCVE-2026-23042In the Linux kernel, the following vulnerability has been resolved: idpf: fix aux device unplugging when rdma is not supported by vport IfCVE-2026-23043In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in do_abort_log_replay() Coverity CVE-2026-23044In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When cCVE-2026-23045In the Linux kernel, the following vulnerability has been resolved: net/ena: fix missing lock when update devlink params Fix assert lock wCVE-2026-23046In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix device mismatch in devm_kzalloc/devm_kfree Initial rssCVE-2026-23047In the Linux kernel, the following vulnerability has been resolved: libceph: make calc_target() set t->paused, not just clear it CurrentlyCVE-2026-23048In the Linux kernel, the following vulnerability has been resolved: udp: call skb_orphan() before skb_attempt_defer_free() Standard UDP reCVE-2026-23049In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 paneCVE-2026-23056.4The AddFunc Head & Footer Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `aFhfc_head_code`, `aFhfc_body_codeCVE-2026-23050In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix a deadlock when returning a delegation during open() Ben CodCVE-2026-23051In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix drm panic null pointer when driver not support atomic