CVE-2026-46069
kernel: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. The mwifiex_adapter_cleanup() function incorrectly uses a non-synchronous timer deletion, allowing the wakeup_timer callback to access memory after it has been freed. This use-after-free vulnerability can lead to system instability, crashes, or potentially arbitrary code execution, impacting the system's reliability and security.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-825 · Expired Pointer Dereference