Linux CVE-2026-23420

The wlcore driver is a Wi-Fi chipset driver in the Linux kernel responsible for managing TI Wilink wireless devices. The vulnerability is rooted in improper mutex (mutual exclusion lock) usage-a critical synchronization primitive in kernel code. The bug occurs in the wlcore module where unlock operations are performed without corresponding lock acquisition, violating the mutual exclusion contract. This is a CWE-667 (Improper Locking) issue where the driver fails to properly acquire locks before releasing them, potentially creating race conditions where multiple code paths access shared data structures concurrently. The Clang thread-safety analyzer identified this anti-pattern, which is particularly dangerous in kernel code where concurrent access to driver state is common.