CVE-2026-46125

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description A use-after-free or double-free condition exists in the mac80211 wireless subsystem when debugfs is enabled. This occurs during MLO (Multi-Link Operation) connections if connection preparation fails, causing the interface to reset to non-MLD (Multi-Link Device). In this scenario, the system fails to remove the associated station, leading to memory corruption because the virtual interface (vif) recreates its entire debugfs structure.

Recommendations Update to a version where the fix for the mac80211 station removal is implemented. Update to kernel-devel-7.0.11-1.1 or a newer version.