CVE-2026-33552

CVE-2026-33552 is a vulnerability identified in the Linux kernel, specifically within the `wlcore` Wi-Fi driver. The issue stems from an incorrect return value when `pskb_expand_head()` fails to allocate sufficient headroom. Instead of returning `-ENOMEM`, the function returns `-EAGAIN`. This misinterpretation of the return value in `wlcore_tx_work_locked()` leads to a problem where `-EAGAIN` is treated as the aggregation buffer being full. Consequently, the code flushes the buffer, re-queues the packet, and immediately attempts to retry processing the same packet in a tight loop. This continuous retry, while holding a mutex, can result in an infinite loop and a CPU soft lockup. The problem was discovered by an experimental code review agent based on gemini-3.1-pro during a review of backports into v6.18.y.