Riskcovery

CVE-2026-64212

wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

State
Published
Severity
Not scored
Published
Jul 24, 2026
Updated
Jul 24, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

In iwl_mld_remove_link, the link->fw_id is saved at the beginning of the function so we have it after we freed the link.

But the link pointer can be NULL, and is not checked when the fw_id is stored.

Fix it by simply freeing the link at the end of the function.

fFixes: 0e66a39f4f0e ("wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()")

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3a74aaad047353da3344aed32e9042d4f334f926Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b6b4db85c7baf0788c5e7ec61350c1ff2bb775e0Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d733ed481fd20a8e7bfe5119c4e77761ba3f87eeAffected
  • before 6.18.34Affected
  • before 7.0.11Affected
LinuxLinux
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.