wifi: mac80211: use safe list iteration in radar detect work
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.2%
exploitation probability
0.2%top 90% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: use safe list iteration in radar detect work
The call to ieee80211_dfs_cac_cancel can cause the iterated chanctx to
be freed and removed from the list. Guard against this to avoid a
slab-use-after-free error.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Linux · LinuxReferences
https://access.redhat.com/errata/RHSA-2026:27288https://access.redhat.com/errata/RHSA-2026:27708https://access.redhat.com/errata/RHSA-2026:27789https://access.redhat.com/errata/RHSA-2026:33215https://access.redhat.com/security/cve/CVE-2026-46166https://bugzilla.redhat.com/show_bug.cgi?id=2482645https://git.kernel.org/stable/c/120149fb3ebcf674832ca3cafd32bedcdb686ddehttps://git.kernel.org/stable/c/7577a4b8a10fab45a6ee2045ea038a5adadbb585https://git.kernel.org/stable/c/887ece6c23b49d02a6678e7a8d5ad213d75883cehttps://git.kernel.org/stable/c/ac8eb3e18f41e2cc8492cc1d358bcb786c850270https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46166.json