CVE-2026-64212: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it
In iwlmldremovelink, the link->fwid is saved at the beginning of the function so we have it after we freed the link.
But the link pointer can be NULL, and is not checked when the fwid is stored.
Fix it by simply freeing the link at the end of the function.
fFixes: 0e66a39f4f0e ("wifi: iwlwifi: fix potential use after free in iwlmldremovelink()")
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 0e66a39f4f0e
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64212?
The severity of CVE-2026-64212 is rated as medium with a CVSS score of 5.5.
How do I fix CVE-2026-64212?
To fix CVE-2026-64212, update to the latest version of the Linux kernel that addresses the vulnerability.
What type of vulnerability is CVE-2026-64212?
CVE-2026-64212 is classified as a Use After Free and Null Pointer Dereference vulnerability.
What impact does CVE-2026-64212 have on the system?
CVE-2026-64212 can potentially lead to denial of service due to a NULL pointer dereference.
What software is affected by CVE-2026-64212?
CVE-2026-64212 affects the Linux kernel specifically related to the iwlwifi driver.