PT-2026-61434 · Linux+2 · Linux Kernel+2

CVE-2026-64117

·

Published

2026-05-20

·

Updated

2026-09-08

CVSS v3.1

8.8

High

VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A slab-use-after-free issue exists in the ieee80211 prepare and rx handle function. The ieee80211 invoke fast rx() function reads RX status via IEEE80211 SKB RXCB(skb), which shares the same skb->cb storage used by ieee80211 rx mesh data() as IEEE80211 TX INFO. In the unicast forward path, ieee80211 rx mesh data() may zero out or free the memory of the skb before the caller executes sta stats encode rate(status), leading to a memory access violation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:65334
AZL-92754
BDU:2026-14327
CVE-2026-64117
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu