CVE-2026-64212CWE-476

CVE-2026-64212

Medium · published July 24, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

In iwl_mld_remove_link, the link->fw_id is saved at the beginning of the

function so we have it after we freed the link.

But the link pointer can be NULL, and is not checked when the fw_id is

stored.

Fix it by simply freeing the link at the end of the function.

fFixes: 0e66a39f4f0e ("wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()")

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-07-24T20:16Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel< 6.18.346.18.34
linux/linux_kernel≥ 6.19, < 7.0.117.0.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 24 JUL 15:23Z
    wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it
    cvelistv5