CVE-2026-64570

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the mac80211 wifi component. The function ieee80211 set fils discovery() calls kfree rcu() on an old template before allocating a replacement. If the kzalloc() function fails and returns -ENOMEM, the link->u.ap.fils discovery variable continues to point to the object already queued for freeing. A subsequent update or AP teardown via ieee80211 stop ap() can re-queue the same rcu head, leading to a second free operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.