CVE-2026-46180

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-05-28 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between send_sig() and kthread_stop() calls, what results in the use-after-free issue. Fix this by increasing watchdog task reference count before calling send_sig() and dropping it by switching to kthread_stop_put().

Weakness Classification (1)

Affected Software (12)

VendorProductVersion
Linux Linux a9ffda88be7416b8336f644806c2b3ed3ce08b26 < a21f735fb1017ef89c6f9dbf4d799513b4e7bd5a
Linux Linux a9ffda88be7416b8336f644806c2b3ed3ce08b26 < df2e90d6a9955510f24f1dada78cfc439fd9fa88
Linux Linux a9ffda88be7416b8336f644806c2b3ed3ce08b26 < d616bb10de79e5c2bd8a24230a1128aeaf715615
Linux Linux a9ffda88be7416b8336f644806c2b3ed3ce08b26 < ed4168d1a50fef5be8eca947fbbf05a28507d265
Linux Linux a9ffda88be7416b8336f644806c2b3ed3ce08b26 < d16827cb1d3936f7627d0da6044483f743ebde03
Linux Linux a9ffda88be7416b8336f644806c2b3ed3ce08b26 < 658d2e46c2e9a8eb9b80c5e803ce3c89885b3366
Linux Linux a9ffda88be7416b8336f644806c2b3ed3ce08b26 < 908b92231e1ded53e43fcfad5e0704d83e1b803c
Linux Linux a9ffda88be7416b8336f644806c2b3ed3ce08b26 < c623b63580880cc742255eaed3d79804c1b91143
Linux Linux 3.3
linux linux_kernel 3.3 – 6.6.140
linux linux_kernel 7.1
linux linux_kernel 7.1

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.14%
Raw Score 0.001410
Percentile 3.4%
Date 2026-11-06

Intelligence Sources

mitre ref →
nvd ref →