CVE-2026-46166
Use-After-Free in Linux Kernel mac80211 Subsystem
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's wifi mac80211 component. It involves unsafe list iteration during radar detection work. Specifically, a call to ieee80211_dfs_cac_cancel can cause the currently iterated channel context (chanctx) to be freed and removed from the list while it is still being iterated over. This can lead to a slab-use-after-free error, which is a type of memory corruption.
How can this vulnerability impact me? :
The vulnerability can cause a slab-use-after-free error in the Linux kernel's wifi subsystem. This type of memory corruption can potentially lead to system instability, crashes, or unexpected behavior in the wireless networking functionality. In some cases, such memory errors can be exploited to execute arbitrary code or cause denial of service, although specific impacts are not detailed here.