CVE-2026-46069

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the mwifiex adapter cleanup() function. The function utilizes timer delete(), which is non-synchronous, for the wakeup timer before the adapter structure is freed. Because timer delete() does not wait for running timer callbacks to complete, the wakeup timer fn callback may continue to access adapter fields such as adapter->hw status and adapter->if ops.card reset after they have been freed by mwifiex free adapter() during the mwifiex remove card() process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.