CVE-2026-64574

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the mac80211 wireless driver. When the ieee80211 vif update links() function adds new links, it allocates link containers and registers debugfs files. If the subsequent drv change vif links() function fails, the error handling path frees the new containers without removing the corresponding debugfs entries or stopping the links. This leaves the debugfs files with dangling pointers to freed memory. A subsequent open and read operation on these files, specifically within the ieee80211 if read link() function, leads to a memory dereference of the freed container. This condition can occur on MLO drivers due to internal allocation, queue, or firmware command failures.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.