CVE-2026-46069 wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
A use-after-free vulnerability in the Linux kernel's mwifiex Wi-Fi driver allows attackers to cause denial of service or execute code via race conditions during adapter cleanup.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-46069?
CVE-2026-46069 is a high-severity use after free vulnerability in Linux kernel, published on 27 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
The mwifiex_adapter_cleanup() function uses timer_delete() (non-synchronous) for the wakeup_timer before the adapter structure is freed. This is incorrect because timer_delete() does not wait for any running timer callback to complete.
If the wakeup_timer callback (wakeup_timer_fn) is executing when mwifiex_adapter_cleanup() is called, the callback will continue to access adapter fields (adapter->hw_status, adapter->if_ops.card_reset, etc.) which may be freed by mwifiex_free_adapter() called later in the mwifiex_remove_card() path.
Use timer_delete_sync() instead to ensure any running timer callback has completed before returning.
Weakness: CWE-416
Which versions are affected by CVE-2026-46069?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-46069?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-46069 being exploited?
There is no known exploitation of CVE-2026-46069 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-88460, BELL-CVE-2026-46069, DEBIAN-CVE-2026-46069, GHSA-q36x-5cv4-59hh, ROOT-OS-DEBIAN-11-CVE-2026-46069, ROOT-OS-DEBIAN-12-CVE-2026-46069 and 3 more.