CVE-2026-64212
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/07/2026
Last modified:
30/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: iwlwifi: mld: don&#39;t dereference a pointer before NULL checking it<br />
<br />
In iwl_mld_remove_link, the link->fw_id is saved at the beginning of the<br />
function so we have it after we freed the link.<br />
<br />
But the link pointer can be NULL, and is not checked when the fw_id is<br />
stored.<br />
<br />
Fix it by simply freeing the link at the end of the function.<br />
<br />
fFixes: 0e66a39f4f0e ("wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()")