PT-2026-64327 · Linux · Linux

CVE-2026-64212 · Publicado 2026-07-24 · Atualizado 2026-07-24

Mitre

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

In iwl mld remove link, the link->fw id is saved at the beginning of the function so we have it after we freed the link.

But the link pointer can be NULL, and is not checked when the fw id is stored.

Fix it by simply freeing the link at the end of the function.

fFixes: 0e66a39f4f0e ("wifi: iwlwifi: fix potential use after free in iwl mld remove link()")

Identificadores relacionados

CVE-2026-64212

Produtos afetados

Linux

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-64212 · Nota de Segurança
• https://git.kernel.org/stable/c/3a74aaad047353da3344aed32e9042d4f334f926 · Nota
• https://git.kernel.org/stable/c/b6b4db85c7baf0788c5e7ec61350c1ff2bb775e0 · Nota
• https://git.kernel.org/stable/c/d733ed481fd20a8e7bfe5119c4e77761ba3f87ee · Nota