CVE-2026-46125

High

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. In this case, we must not keep the station since it's related to the link of the vif being removed. Delete an existing station. Any "new_sta" is already being removed, so that doesn't need changes. This fixes a use-after-free/double-free in debugfs if that's enabled, because a vif going from MLD (and to MLD, but that's not relevant here) recreates its entire debugfs.

SeverityHigh

CVSS8.8

Exploit probability23. percentile0.3%

Product

Linux Kernel

PublishedMay 28, 2026

First seenMay 28, 2026

Weakness typeCWE-825CWE-825 CWE-416Use after free

How to fix

Update

linux linux_kernel6.1.176, 6.6.140, 6.12.88, 6.18.30, 7.0.7 or later

Vendor advisories

Affected products

Product	Affected versions	Fixed in
linux linux_kernel	6.0 ≤ v < 6.1.176, 6.2 ≤ v < 6.6.140, 6.7 ≤ v < 6.12.88, 6.13 ≤ v < 6.18.30, 6.19 ≤ v < 7.0.7, 7.1	6.1.176, 6.6.140, 6.12.88, 6.18.30, 7.0.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.