CVE-2026-68152

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

amt: fix use-after-free in AMT delayed works

When an AMT device is removed, pending delayed works can still access

the freed amt_dev structure, which may result in kernel crashes or

memory corruption.

amt_dev_stop() cancels req_wq and discovery_wq with

cancel_delayed_work_sync(), but these works can be scheduled again

from event_wq after the cancellation. This allows delayed works to

access the freed amt_dev structure after the netdev has been released.

The following is a simple race scenario:

CPU0 CPU1

amt_dev_stop()

cancel_delayed_work_sync()

amt_event_work()

mod_delayed_work(req_wq)

free netdev

req_wq accesses freed amt_dev

Use disable_delayed_work_sync() in amt_dev_stop() to prevent req_wq and

discovery_wq from being queued again and wait for running work items

to complete.

The delayed works are di

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References