Double-Free Vulnerability in Linux Kernel Affects Wifi Functionality

CVE-2026-64570

What is CVE-2026-64570?

A memory management issue has been identified in the Linux kernel that affects the handling of fils_discovery in Wifi functionalities. The flaw lies in the ieee80211_set_fils_discovery() function, where a double-free condition can occur due to improper allocation management. Specifically, if kzalloc() fails after kfree_rcu() is called on an old template, the link can still point to an invalid memory address, leading to a potential double-free scenario. This can cause memory corruption and system instability, making it vital to apply the latest patches to mitigate this risk.

References