CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
Watchdog task might end between sendsig() and kthreadstop() calls, what results in the use-after-free issue. Fix this by increasing watchdog task reference count before calling sendsig() and dropping it by switching to kthreadstopput().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46180?
CVE-2026-46180 has a risk rating of 31, indicating a moderate to high severity level.
How do I fix CVE-2026-46180?
To fix CVE-2026-46180, update your Linux kernel to the latest version where this vulnerability has been addressed.
What type of vulnerability is CVE-2026-46180?
CVE-2026-46180 is classified as a Use After Free vulnerability in the Linux kernel's brcmfmac driver.
What can be affected by CVE-2026-46180?
CVE-2026-46180 can potentially affect systems running the Linux kernel with the brcmfmac driver, which handles certain Wi-Fi tasks.
When was CVE-2026-46180 published?
CVE-2026-46180 was published on May 28, 2026.