CVE Database›Document archive›CVE-2026-46125

CVE-2026-46125

kernel: wifi: mac80211: remove station if connection prep fails

Loading…

Severity

Moderate

Red Hat Product Security

6.8

CVSS 3.1

Review impact separately from score.

Published · May 28, 2026

Updated · October 1, 2026

Description

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. When Multi-Link Operation (MLO) connection preparation fails, the system may not correctly remove the associated station. This can lead to a use-after-free or double-free vulnerability in the debugfs component, potentially causing system instability or unexpected behavior.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this vulnerability on systems that do not require Wi-Fi connectivity, prevent the mac80211 kernel module from loading.

  1. Blacklist the module by creating a configuration file in /etc/modprobe.d/:
echo "install mac80211 /bin/true" >> /etc/modprobe.d/disable-mac80211.conf
  1. If the module is currently loaded, unload it or restart the system:
modprobe -r mac80211

Caveats: Disabling mac80211 disables all Wi-Fi functionality on the host. Unloading kernel modules or restarting the system will interrupt active network services and running workloads. If dependent wireless drivers are actively in use, a system reboot is required for the configuration to take effect.

CVSS / CWE

CVSS 3.1 · 6.8
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-825 · Expired Pointer Dereference