CVE-2026-46125

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/05/2026
Last modified:
28/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: mac80211: remove station if connection prep fails<br /> <br /> If connection preparation fails for MLO connections, then the<br /> interface is completely reset to non-MLD. In this case, we must<br /> not keep the station since it&amp;#39;s related to the link of the vif<br /> being removed. Delete an existing station. Any "new_sta" is<br /> already being removed, so that doesn&amp;#39;t need changes.<br /> <br /> This fixes a use-after-free/double-free in debugfs if that&amp;#39;s<br /> enabled, because a vif going from MLD (and to MLD, but that&amp;#39;s<br /> not relevant here) recreates its entire debugfs.

Impact