CVE-2026-46069
Publication date 27 May 2026
Last updated 9 October 2026
Ubuntu priority
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() The mwifiex_adapter_cleanup() function uses timer_delete() (non-synchronous) for the wakeup_timer before the adapter structure is freed. This is incorrect because timer_delete() does not wait for any running timer callback to complete. If the wakeup_timer callback (wakeup_timer_fn) is executing when mwifiex_adapter_cleanup() is called, the callback will continue to access adapter fields (adapter->hw_status, adapter->if_ops.card_reset, etc.) which may be freed by mwifiex_free_adapter() called later in the mwifiex_remove_card() path. Use timer_delete_sync() instead to ensure any running timer callback has completed before returning.
Patch details
| Package | Patch details |
|---|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
7.8 · High
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Related Ubuntu Security Notices (USN)
- USN-8488-1
- Linux kernel vulnerabilities
- 1 July 2026
- USN-8489-1
- Linux kernel (OEM) vulnerabilities
- 1 July 2026
- USN-8488-2
- Linux kernel (Raspberry Pi) vulnerabilities
- 2 July 2026
- USN-8507-1
- Linux kernel (NVIDIA) vulnerabilities
- 6 July 2026
- USN-8567-1
- Linux kernel vulnerabilities
- 20 July 2026
- USN-8569-1
- Linux kernel (HWE) vulnerabilities
- 20 July 2026
- USN-8574-1
- Linux kernel (GCP FIPS) vulnerabilities
- 21 July 2026
- USN-8574-2
- Linux kernel vulnerabilities
- 23 July 2026
- USN-8595-1
- Linux kernel (Oracle) vulnerabilities
- 23 July 2026
- USN-8596-1
- Linux kernel (NVIDIA) vulnerabilities
- 23 July 2026
- USN-8603-1
- Linux kernel (Azure) vulnerabilities
- 24 July 2026
- USN-8595-2
- Linux kernel (AWS) vulnerabilities
- 24 July 2026
- USN-8606-1
- Linux kernel (Azure) vulnerabilities
- 24 July 2026
- USN-8607-1
- Linux kernel (Azure CVM) vulnerabilities
- 24 July 2026
- USN-8608-1
- Linux kernel (Azure FIPS) vulnerabilities
- 24 July 2026
- USN-8609-1
- Linux kernel (Azure CVM) vulnerabilities
- 24 July 2026
- USN-8665-1
- Linux kernel (Raspberry Pi) vulnerabilities
- 20 August 2026
- USN-8595-3
- Linux kernel (AWS) vulnerabilities
- 28 July 2026
- USN-8574-3
- Linux kernel vulnerabilities
- 28 July 2026
- USN-8619-1
- Linux kernel (HWE) vulnerabilities
- 28 July 2026
- USN-8876-1
- Linux kernel (Azure CVM) vulnerabilities
- 6 October 2026
- USN-8878-1
- Linux kernel (GCP) vulnerabilities
- 6 October 2026
- USN-8879-1
- Linux kernel (Oracle) vulnerabilities
- 6 October 2026
- USN-8877-1
- Linux kernel (GCP) vulnerabilities
- 6 October 2026
- USN-8875-1
- Linux kernel vulnerabilities
- 6 October 2026
- USN-8875-2
- Linux kernel (NVIDIA) vulnerabilities
- 9 October 2026