CVE-2026-46166 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211_dfs_cac_cancel can cause the iterated chanctx to be freed and removed from the list. Guard against this to avoid a slab-use-after-free error.
A use-after-free vulnerability has been identified in the Linux kernel's mac80211 Wi-Fi module, specifically in the radar detection handling. This issue arises because the function ieee80211_dfs_cac_cancel can free and remove the iterated channel context from the list, leading to a slab-use-after-free error. The vulnerability affects the Linux kernel stable tree.
Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2026:27288 | redhat-SADP | |
| https://access.redhat.com/errata/RHSA-2026:27708 | redhat-SADP | |
| https://access.redhat.com/errata/RHSA-2026:27789 | redhat-SADP | |
| https://access.redhat.com/errata/RHSA-2026:33215 | redhat-SADP | |
| https://access.redhat.com/security/cve/CVE-2026-46166 | redhat-SADP | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2482645 | redhat-SADP | |
| https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46166.json | redhat-SADP | |
| https://git.kernel.org/stable/c/120149fb3ebcf674832ca3cafd32bedcdb686dde | kernel.org | Patch |
| https://git.kernel.org/stable/c/7577a4b8a10fab45a6ee2045ea038a5adadbb585 | kernel.org | Patch |
| https://git.kernel.org/stable/c/887ece6c23b49d02a6678e7a8d5ad213d75883ce | kernel.org | Patch |
| https://git.kernel.org/stable/c/ac8eb3e18f41e2cc8492cc1d358bcb786c850270 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
| CWE-825 | Expired Pointer Dereference | redhat-SADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.12, < 6.12.88 >= 6.13, < 6.18.30 >= 6.19, < 7.0.7 7.1 rc1 7.1 rc2 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | CVE Modified | redhat-SADP |
| Jul 9, 2026 | CVE Modified | redhat-SADP |
| Jun 30, 2026 | CVE Modified | redhat-SADP |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 10, 2026 | Initial Analysis | [email protected] |
| May 30, 2026 | CVE Modified | kernel.org |
| May 28, 2026 | New CVE Received | kernel.org |