CVE-2026-46125
kernel: wifi: mac80211: remove station if connection prep fails
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 28, 2026
Updated · October 1, 2026
Description
A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. When Multi-Link Operation (MLO) connection preparation fails, the system may not correctly remove the associated station. This can lead to a use-after-free or double-free vulnerability in the debugfs component, potentially causing system instability or unexpected behavior.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this vulnerability on systems that do not require Wi-Fi connectivity, prevent the mac80211 kernel module from loading.
- Blacklist the module by creating a configuration file in /etc/modprobe.d/:
echo "install mac80211 /bin/true" >> /etc/modprobe.d/disable-mac80211.conf
- If the module is currently loaded, unload it or restart the system:
modprobe -r mac80211
Caveats: Disabling mac80211 disables all Wi-Fi functionality on the host. Unloading kernel modules or restarting the system will interrupt active network services and running workloads. If dependent wireless drivers are actively in use, a system reboot is required for the configuration to take effect.
CVSS / CWE
CVSS 3.1 · 6.8CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-825 · Expired Pointer Dereference