CVE Database›Document archive›CVE-2026-46069

CVE-2026-46069

kernel: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. The mwifiex_adapter_cleanup() function incorrectly uses a non-synchronous timer deletion, allowing the wakeup_timer callback to access memory after it has been freed. This use-after-free vulnerability can lead to system instability, crashes, or potentially arbitrary code execution, impacting the system's reliability and security.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-825 · Expired Pointer Dereference