Yüksek CVSS 8.8

CVE-2026-46125: Linux Kernel: serbest bırakılmış belleğin kullanımı

Yayın: 28 Mayıs 2026 13:16 · Güncelleme: 6 Kasım 2026 10:19

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. In this case, we must not keep the station since it's related to the link of the vif being removed. Delete an existing station. Any "new_sta" is already being removed, so that doesn't need changes. This fixes a use-after-free/double-free in debugfs if that's enabled, because a vif going from MLD (and to MLD, but that's not relevant here) recreates its entire debugfs.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: %0,30 (yüzdelik 23)
CWE: CWE-416
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	6.0	—	6.1.176
linux-linux-kernel	6.2	—	6.6.140
linux-linux-kernel	6.7	—	6.12.88
linux-linux-kernel	6.13	—	6.18.30
linux-linux-kernel	6.19	—	7.0.7
linux-linux-kernel	7.1	7.1	—
linux-linux-kernel	7.1	7.1	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları