CVE-2026-46180

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the brcmfmac Wi-Fi driver when stopping the watchdog task. This issue occurs because the watchdog task might terminate prematurely, leading to a use-after-free condition. This could allow a local attacker to cause a denial of service or potentially execute arbitrary code.

This vulnerability is rated Moderate rather than Important because successful exploitation requires local access on a system with active Broadcom wireless hardware, which is uncommon in standard enterprise server environments. While the timing issue during task termination can trigger memory corruption, the blast radius is primarily limited to a local denial of service via kernel panic. Deployments that do not use Broadcom Wi-Fi adapters or where the driver module is not loaded are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.