← Back to CVE search

CVE-2026-64212

Linux Kernel

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don-t dereference a pointer before NULL checking it In iwl_mld_remove_link, the link->fw_id is saved at the beginning of the function so we have it after we freed the link. But the link pointer can be NULL, and is not checked when the fw_id is stored. Fix it by simply freeing the link at the end of the function. fFixes: 0e66a39f4f0e (-wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()-)

CVSS 5.5EPSS 0.166%Risk 0.56
View source
Published
2026-07-24 16:16:48
Affected versions
unknown
Type
Kernel
Last modified
2026-08-11 17:23:05
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Operating systems
Linux