PT-2026-61434 · Linux+2 · Linux Kernel+2
CVE-2026-64117
·
Published
2026-05-20
·
Updated
2026-09-08
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A slab-use-after-free issue exists in the
ieee80211 prepare and rx handle function. The ieee80211 invoke fast rx() function reads RX status via IEEE80211 SKB RXCB(skb), which shares the same skb->cb storage used by ieee80211 rx mesh data() as IEEE80211 TX INFO. In the unicast forward path, ieee80211 rx mesh data() may zero out or free the memory of the skb before the caller executes sta stats encode rate(status), leading to a memory access violation.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu