Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-46125

wifi: mac80211: remove station if connection prep fails

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. In this case, we must not keep the station since it's related to the link of the vif being removed. Delete an existing station. Any "new_sta" is already being removed, so that doesn't need changes. This fixes a use-after-free/double-free in debugfs if that's enabled, because a vif going from MLD (and to MLD, but that's not relevant here) recreates its entire debugfs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to < 18fed0a209500bfea5c4c08609ec93855e4e500baffected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to < fe75fa1ac9a92990f7fc3d34b17808fd933071b2affected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to < afcbaed89cdc1a001b43270cbf5394bb4804270aaffected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to < 9e28654f79f443bca9b29ff3ae7cf18abfba58a0affected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to < 1c2b72ea89882aeb948340498391e69c58d466f1affected
  • 81151ce462e533551f3284bfdb8e0f461c9220e6 to < 283fc9e44ff5b5ac967439b4951b80bd4299f4e4affected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.140 to ≤ 6.6.*unaffected
  • 6.12.88 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References