NetSight
IP …
high8.8

CVE-2026-46125

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for…

Impact

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. In this case, we must not keep the station since it's related to the link of the vif being removed. Delete an existing station. Any "new_sta" is already being removed, so that doesn't need changes. This fixes a use-after-free/double-free in debugfs if that's enabled, because a vif going from MLD (and to MLD, but that's not relevant here) recreates its entire debugfs.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.0 before 6.1.176
from 6.2 before 6.6.140
from 6.7 before 6.12.88
from 6.13 before 6.18.30
from 6.19 before 7.0.7
Version 7.1

Weakness classification

CWE-416CWE-825

References