جزئیات آسیب‌پذیری
CVE-2026-46125
Linux LinuxRed Hat Enterprise Linux 9Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
wifi: mac80211: remove station if connection prep fails
CVSS 3.1
8.8بالا
شرح رسمی (انگلیسی)
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection prep fails If connection preparation fails for MLO connections, then the interface is completely reset to non-MLD. In this case, we must not keep the station since it's related to the link of the vif being removed. Delete an existing station. Any "new_sta" is already being removed, so that doesn't need changes. This fixes a use-after-free/double-free in debugfs if that's enabled, because a vif going from MLD (and to MLD, but that's not relevant here) recreates its entire debugfs.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 6.8متوسط | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Linux | Linux | 6.0 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 81151ce462e533551f3284bfdb8e0f461c9220e6 ≤ v < fe75fa1ac9a92990f7fc3d34b17808fd933071b2 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 81151ce462e533551f3284bfdb8e0f461c9220e6 ≤ v < afcbaed89cdc1a001b43270cbf5394bb4804270a | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 81151ce462e533551f3284bfdb8e0f461c9220e6 ≤ v < 9e28654f79f443bca9b29ff3ae7cf18abfba58a0 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 81151ce462e533551f3284bfdb8e0f461c9220e6 ≤ v < 1c2b72ea89882aeb948340498391e69c58d466f1 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 81151ce462e533551f3284bfdb8e0f461c9220e6 ≤ v < 283fc9e44ff5b5ac967439b4951b80bd4299f4e4 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 81151ce462e533551f3284bfdb8e0f461c9220e6 ≤ v < 18fed0a209500bfea5c4c08609ec93855e4e500b | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۰- https://git.kernel.org/stable/c/18fed0a209500bfea5c4c08609ec93855e4e500b
- https://git.kernel.org/stable/c/fe75fa1ac9a92990f7fc3d34b17808fd933071b2
- https://git.kernel.org/stable/c/afcbaed89cdc1a001b43270cbf5394bb4804270a
- https://git.kernel.org/stable/c/9e28654f79f443bca9b29ff3ae7cf18abfba58a0
- https://git.kernel.org/stable/c/1c2b72ea89882aeb948340498391e69c58d466f1
- https://git.kernel.org/stable/c/283fc9e44ff5b5ac967439b4951b80bd4299f4e4
- https://access.redhat.com/security/cve/CVE-2026-46125 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2482608 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46125.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:27731 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27288 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26515 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27735 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27708 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27789 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26427 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26563 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26428 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26462 vendor-advisoryx_refsource_REDHAT
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۳/۰۷
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۷/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Linux
پیش‌بینی بهره‌برداری (EPSS)
۰٫۳٪
احتمال بهره‌برداری در ۳۰ روز
۲۳٫۱٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-825Expired Pointer Dereference
- CWE-416Use After Free