CVE-2026-64568

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free issue exists in the mac80211 wifi component. The function ieee80211 set unsol bcast probe resp() calls kfree rcu() on an old template before allocating a replacement. If the kzalloc() function fails and returns -ENOMEM, the link->u.ap.unsol bcast probe resp variable continues to point to the object already queued for freeing. A subsequent update or Access Point (AP) teardown may re-queue the same rcu head, leading to a second free operation. This is detected by KASAN during the processing of the RCU sheaf in softirq.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.