PT-2026-44248 · Linux+2 · Linux Kernel+2

Greg Kroah-Hartman

+1

·

CVE-2026-46125

·

Published

2026-05-28

·

Updated

2026-07-24

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1
Description A use-after-free or double-free condition exists in the mac80211 wireless subsystem when debugfs is enabled. This occurs during MLO (Multi-Link Operation) connections if connection preparation fails, causing the interface to reset to non-MLD (Multi-Link Device). In this scenario, the system fails to remove the associated station, leading to memory corruption because the virtual interface (vif) recreates its entire debugfs structure.
Recommendations Update to a version where the fix for the mac80211 station removal is implemented. Update to kernel-devel-7.0.11-1.1 or a newer version.

Exploit

Fix

DoS

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416CWE-825

Related Identifiers

ALSA-2026:26427
ALSA-2026:26428
ALSA-2026:27288
ALSA-2026:27789
CVE-2026-46125
ECHO-8BE1-80FB-7506
OPENSUSE-SU-2026:10954-1
RHSA-2026:26427
RHSA-2026:26428
RHSA-2026:26462
RHSA-2026:26515
RHSA-2026:26563
RHSA-2026:27288
RHSA-2026:27708
RHSA-2026:27731
RHSA-2026:27735
RHSA-2026:27789
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
USN-8566-1
USN-8567-1
USN-8568-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8593-1
USN-8595-1
USN-8595-2
USN-8596-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1

Affected Products

Linux Kernel
Rocky Linux
Opensuse Tumbleweed