7.8

CVE-2026-46180: linux Use After Free

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2026-46180DEBIAN-CVE-2026-46180
Published 28-05-2026Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2026-46180 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
0.14%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 45 · Related 45
OPENSUSE-SU-2026:10954-1OPENSUSE-SU-2026:21555-1SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1

Timeline

  1. 28-05-2026
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between send_sig() and kthread_stop() calls, what results in the use-after-free issue. Fix this by increasing watchdog task reference count before calling send_sig() and dropping it by switching to kthread_stop_put().

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

+0.01 pp

From 0.14% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu166 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 6.8.0-136.136 | < 7.0.0-28.28
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 6.8.0-1061.64 | < 7.0.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ a9ffda88be7416b8336f644806c2b3ed3ce08b26, < a21f735fb1017ef89c6f9dbf4d799513b4e7bd5a | ≥ a9ffda88be7416b8336f644806c2b3ed3ce08b26, < df2e90d6a9955510f24f1dada78cfc439fd9fa88 | ≥ a9ffda88be7416b8336f644806c2b3ed3ce08b26, < d616bb10de79e5c2bd8a24230a1128aeaf715615 | ≥ a9ffda88be7416b8336f644806c2b3ed3ce08b26, < ed4168d1a50fef5be8eca947fbbf05a28507d265 | ≥ a9ffda88be7416b8336f644806c2b3ed3ce08b26, < d16827cb1d3936f7627d0da6044483f743ebde03 | ≥ a9ffda88be7416b8336f644806c2b3ed3ce08b26, < 658d2e46c2e9a8eb9b80c5e803ce3c89885b3366 | ≥ a9ffda88be7416b8336f644806c2b3ed3ce08b26, < 908b92231e1ded53e43fcfad5e0704d83e1b803c | ≥ a9ffda88be7416b8336f644806c2b3ed3ce08b26, < c623b63580880cc742255eaed3d79804c1b91143 | 3.3
  • linux_kernel≥ 3.3, < 6.6.140 | ≥ 6.7, < 6.12.88 | ≥ 6.13, < 6.18.30 | ≥ 6.19, < 7.0.7 | 7.1:rc1 | 7.1:rc2
Debian1 product
  • linux< 6.1.176-1 | < 6.12.88-1 | < 7.0.7-1

3 vendors · 169 products

References

45 links
Show all 45 references