High 7.8Published May 28, 2026

CVE-2026-46180wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task

Updated under an hour ago (Oct 27, 2026, 6:40 AM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between send_sig() and kthread_stop() calls, what results in the use-after-free issue. Fix this by increasing watchdog task reference count before calling send_sig() and dropping it by switching to kthread_stop_put().

CVSS: 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a9ffda88be7416b8336f644806c2b3ed3ce08b26 before a21f735fb1017ef89c6f9dbf4d799513b4e7bd5a; from a9ffda88be7416b8336f644806c2b3ed3ce08b26 before df2e90d6a9955510f24f1dada78cfc439fd9fa88; from a9ffda88be7416b8336f644806c2b3ed3ce08b26 before d616bb10de79e5c2bd8a24230a1128aeaf715615; from a9ffda88be7416b8336f644806c2b3ed3ce08b26 before ed4168d1a50fef5be8eca947fbbf05a28507d265; from a9ffda88be7416b8336f644806c2b3ed3ce08b26 before d16827cb1d3936f7627d0da6044483f743ebde03; from a9ffda88be7416b8336f644806c2b3ed3ce08b26 before 658d2e46c2e9a8eb9b80c5e803ce3c89885b3366; from a9ffda88be7416b8336f644806c2b3ed3ce08b26 before 908b92231e1ded53e43fcfad5e0704d83e1b803c; from a9ffda88be7416b8336f644806c2b3ed3ce08b26 before c623b63580880cc742255eaed3d79804c1b91143	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
linux linux_kernel linux:linux_kernel	from 3.3 before 6.6.140; from 6.7 before 6.12.88; from 6.13 before 6.18.30; from 6.19 before 7.0.7; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/a21f735fb1017ef89c6f9dbf4d799513b4e7bd5a
https://git.kernel.org/stable/c/df2e90d6a9955510f24f1dada78cfc439fd9fa88
https://git.kernel.org/stable/c/d616bb10de79e5c2bd8a24230a1128aeaf715615
https://git.kernel.org/stable/c/ed4168d1a50fef5be8eca947fbbf05a28507d265	patch
https://git.kernel.org/stable/c/d16827cb1d3936f7627d0da6044483f743ebde03	patch
https://git.kernel.org/stable/c/658d2e46c2e9a8eb9b80c5e803ce3c89885b3366	patch
https://git.kernel.org/stable/c/908b92231e1ded53e43fcfad5e0704d83e1b803c	patch
https://git.kernel.org/stable/c/c623b63580880cc742255eaed3d79804c1b91143	patch
https://cert-portal.siemens.com/productcert/html/ssa-784472.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.