led_init_core of the file kernel/workqueue.c. The manipulation leads to uninitialized pointer.This vulnerability is referenced as CVE-2026-23101. The attack needs to be initiated within the local network. No exploit is available.
It is advisable to upgrade the affected component.