CVE-2026-46180

wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task

State: Published
Severity: Not scored
Published: May 28, 2026
Updated: Oct 15, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task

Watchdog task might end between send_sig() and kthread_stop() calls, what results in the use-after-free issue. Fix this by increasing watchdog task reference count before calling send_sig() and dropping it by switching to kthread_stop_put().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before a21f735fb1017ef89c6f9dbf4d799513b4e7bd5aAffected a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before df2e90d6a9955510f24f1dada78cfc439fd9fa88Affected a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before d616bb10de79e5c2bd8a24230a1128aeaf715615Affected a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before ed4168d1a50fef5be8eca947fbbf05a28507d265Affected a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before d16827cb1d3936f7627d0da6044483f743ebde03Affected a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before 658d2e46c2e9a8eb9b80c5e803ce3c89885b3366Affected a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before 908b92231e1ded53e43fcfad5e0704d83e1b803cAffected a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before c623b63580880cc742255eaed3d79804c1b91143Affected
LinuxLinux	3.3Affected before 3.3Not affected 5.10.259 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.176 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.88 through 6.12.Not affected 6.18.30 through 6.18.Not affected 7.0.7 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before a21f735fb1017ef89c6f9dbf4d799513b4e7bd5aAffected
a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before df2e90d6a9955510f24f1dada78cfc439fd9fa88Affected
a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before d616bb10de79e5c2bd8a24230a1128aeaf715615Affected
a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before ed4168d1a50fef5be8eca947fbbf05a28507d265Affected
a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before d16827cb1d3936f7627d0da6044483f743ebde03Affected
a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before 658d2e46c2e9a8eb9b80c5e803ce3c89885b3366Affected
a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before 908b92231e1ded53e43fcfad5e0704d83e1b803cAffected
a9ffda88be7416b8336f644806c2b3ed3ce08b26 to before c623b63580880cc742255eaed3d79804c1b91143Affected

LinuxLinux

3.3Affected
before 3.3Not affected
5.10.259 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.176 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.88 through 6.12.*Not affected
6.18.30 through 6.18.*Not affected
7.0.7 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.