CVE-2026-46180
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchd
CVSS
7.8
High
EPSS
0.1%
p3
KEV
—
Exploit Today
1
0-100
Published: May 28, 2026 · Last modified: Oct 15, 2026 · CWE-416
0.1%EPSS · 30 days0.2%
2026-09-302026-10-27
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between send_sig() and kthread_stop() calls, what results in the use-after-free issue. Fix this by increasing watchdog task reference count before calling send_sig() and dropping it by switching to kthread_stop_put().
- git.kernel.orghttps://git.kernel.org/stable/c/658d2e46c2e9a8eb9b80c5e803ce3c89885b3366
- git.kernel.orghttps://git.kernel.org/stable/c/908b92231e1ded53e43fcfad5e0704d83e1b803c
- git.kernel.orghttps://git.kernel.org/stable/c/a21f735fb1017ef89c6f9dbf4d799513b4e7bd5a
- git.kernel.orghttps://git.kernel.org/stable/c/c623b63580880cc742255eaed3d79804c1b91143
- git.kernel.orghttps://git.kernel.org/stable/c/d16827cb1d3936f7627d0da6044483f743ebde03
- git.kernel.orghttps://git.kernel.org/stable/c/d616bb10de79e5c2bd8a24230a1128aeaf715615
- git.kernel.orghttps://git.kernel.org/stable/c/df2e90d6a9955510f24f1dada78cfc439fd9fa88
- git.kernel.orghttps://git.kernel.org/stable/c/ed4168d1a50fef5be8eca947fbbf05a28507d265
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-784472.html
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-935165.5 MED—
———A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X Clients to crash the X server or potentially execute code in X server context.12hCVE-2026-93515——
———A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potentially execute code in the X server context.12hCVE-2026-1183578.8 HIG—
——0Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7hCVE-2026-1183568.8 HIG—
——0Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7hCVE-2026-1183538.8 HIG—
——0Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7hCVE-2026-1183508.8 HIG—
——0Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7h