Riskcovery

CVE-2026-46125

wifi: mac80211: remove station if connection prep fails

State
Published
Severity
8.8 High
Published
May 28, 2026
Updated
Oct 19, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: remove station if connection prep fails

If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. In this case, we must not keep the station since it's related to the link of the vif being removed. Delete an existing station. Any "new_sta" is already being removed, so that doesn't need changes.

This fixes a use-after-free/double-free in debugfs if that's enabled, because a vif going from MLD (and to MLD, but that's not relevant here) recreates its entire debugfs.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux
3.16.8 MediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hredhat-SADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to before 18fed0a209500bfea5c4c08609ec93855e4e500bAffected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to before fe75fa1ac9a92990f7fc3d34b17808fd933071b2Affected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to before afcbaed89cdc1a001b43270cbf5394bb4804270aAffected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to before 9e28654f79f443bca9b29ff3ae7cf18abfba58a0Affected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to before 1c2b72ea89882aeb948340498391e69c58d466f1Affected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to before 283fc9e44ff5b5ac967439b4951b80bd4299f4e4Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.176 through 6.1.*Not affected
  • 6.6.140 through 6.6.*Not affected
  • 6.12.88 through 6.12.*Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.