CVE-2026-46166

8.8 Élevée

Publiée le 28/05/2026 à 12:16 · Modifiée le 19/10/2026 à 22:18 · Modifiée · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar detect work The call to ieee80211_dfs_cac_cancel can cause the iterated chanctx to be freed and removed from the list. Guard against this to avoid a slab-use-after-free error.

Traduire en français

Produits concernés

Linux
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 10.0 Extended Update Support
Red Hat Enterprise Linux 9
Red Hat Enterprise Linux 9.6 Extended Update Support
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	416baaa9-dc9f-4396-8d5f-8c081fb06d67	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
3.1	7.0 Élevée	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-416
CWE-825

Références

https://git.kernel.org/stable/c/120149fb3ebcf674832ca3cafd32bedcdb686dde Patch
https://git.kernel.org/stable/c/7577a4b8a10fab45a6ee2045ea038a5adadbb585 Patch
https://git.kernel.org/stable/c/887ece6c23b49d02a6678e7a8d5ad213d75883ce Patch
https://git.kernel.org/stable/c/ac8eb3e18f41e2cc8492cc1d358bcb786c850270 Patch
https://access.redhat.com/errata/RHSA-2026:27288
https://access.redhat.com/errata/RHSA-2026:27708
https://access.redhat.com/errata/RHSA-2026:27789
https://access.redhat.com/errata/RHSA-2026:33215
https://access.redhat.com/security/cve/CVE-2026-46166
https://bugzilla.redhat.com/show_bug.cgi?id=2482645
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46166.json

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories