{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46187", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.104Z", "datePublished": "2026-05-28T09:36:41.427Z", "dateUpdated": "2026-06-14T18:01:14.431Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-14T18:01:14.431Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rsi: fix kthread lifetime race between self-exit and external-stop\n\nRSI driver use both self-exit(kthread_complete_and_exit) and external-stop\n(kthread_stop) when killing a kthread. Generally, kthread_stop() is called\nfirst, and in this case, no particular issues occur.\n\nHowever, in rare instances where kthread_complete_and_exit() is called\nfirst and then kthread_stop() is called, a UAF occurs because the kthread\nobject, which has already exited and been freed, is accessed again.\n\nTherefore, to prevent this with minimal modification, you must remove\nkthread_stop() and change the code to wait until the self-exit operation\nis completed."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/rsi/rsi_common.h"], "versions": [{"version": "4c62764d0fc21a34ffc44eec1210038c3a2e4473", "lessThan": "4ac3095da22fc50e51ec10c3b8323c21ab3e441a", "status": "affected", "versionType": "git"}, {"version": "4c62764d0fc21a34ffc44eec1210038c3a2e4473", "lessThan": "9dfe8a4458a063c6433526bc59112a169eee1aa3", "status": "affected", "versionType": "git"}, {"version": "4c62764d0fc21a34ffc44eec1210038c3a2e4473", "lessThan": "4f697813162d5f9151726a6d2bee82bffe4b0256", "status": "affected", "versionType": "git"}, {"version": "4c62764d0fc21a34ffc44eec1210038c3a2e4473", "lessThan": "95fcb436586dc3c2983537d557ac05bbc6a027f3", "status": "affected", "versionType": "git"}, {"version": "4c62764d0fc21a34ffc44eec1210038c3a2e4473", "lessThan": "16d9f674c619838bdeae42abc0929c9c5477ea1f", "status": "affected", "versionType": "git"}, {"version": "4c62764d0fc21a34ffc44eec1210038c3a2e4473", "lessThan": "4f9a4ae8d2c198f01611ea376034c326ef43ab56", "status": "affected", "versionType": "git"}, {"version": "4c62764d0fc21a34ffc44eec1210038c3a2e4473", "lessThan": "4f4c9b13c485abd0a2d2c97f9db339d1dd8e147f", "status": "affected", "versionType": "git"}, {"version": "4c62764d0fc21a34ffc44eec1210038c3a2e4473", "lessThan": "db57a1aa54ff68669781976e4edb045e09e2b65b", "status": "affected", "versionType": "git"}, {"version": "d8f70ad66032363e3edceee81a7be2aaccb2d7f5", "status": "affected", "versionType": "git"}, {"version": "ec759c0015fb7d4f5c7cb5711d2c8905724c7983", "status": "affected", "versionType": "git"}, {"version": "c8ed05b1d8520f40395916438da9b38ce937a896", "status": "affected", "versionType": "git"}, {"version": "ad78e2e057ab8d914a2b5e3e6acf29c3c8a428a3", "status": "affected", "versionType": "git"}, {"version": "de1fd69b6541ff61177114d63af7ea719c426cf0", "status": "affected", "versionType": "git"}, {"version": "3.18.139", "lessThan": "3.19", "status": "affected", "versionType": "semver"}, {"version": "4.4.179", "lessThan": "4.5", "status": "affected", "versionType": "semver"}, {"version": "4.9.170", "lessThan": "4.10", "status": "affected", "versionType": "semver"}, {"version": "4.14.113", "lessThan": "4.15", "status": "affected", "versionType": "semver"}, {"version": "4.19.36", "lessThan": "4.20", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/rsi/rsi_common.h"], "versions": [{"version": "4.20", "status": "affected"}, {"version": "0", "lessThan": "4.20", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.258", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.209", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.140", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.88", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.30", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.7", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "5.10.258"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "5.15.209"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.1.175"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.6.140"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.12.88"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.18.30"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "7.0.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "7.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.18.139"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.4.179"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9.170"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19.36"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/4ac3095da22fc50e51ec10c3b8323c21ab3e441a"}, {"url": "https://git.kernel.org/stable/c/9dfe8a4458a063c6433526bc59112a169eee1aa3"}, {"url": "https://git.kernel.org/stable/c/4f697813162d5f9151726a6d2bee82bffe4b0256"}, {"url": "https://git.kernel.org/stable/c/95fcb436586dc3c2983537d557ac05bbc6a027f3"}, {"url": "https://git.kernel.org/stable/c/16d9f674c619838bdeae42abc0929c9c5477ea1f"}, {"url": "https://git.kernel.org/stable/c/4f9a4ae8d2c198f01611ea376034c326ef43ab56"}, {"url": "https://git.kernel.org/stable/c/4f4c9b13c485abd0a2d2c97f9db339d1dd8e147f"}, {"url": "https://git.kernel.org/stable/c/db57a1aa54ff68669781976e4edb045e09e2b65b"}], "title": "wifi: rsi: fix kthread lifetime race between self-exit and external-stop", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "00ECE319-2D3D-436D-9AE0-E83440DA1972", "versionEndExcluding": "3.19", "versionStartIncluding": "3.18.139", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "93408D6A-A152-414B-9F27-4CF1E0D3C9A5", "versionEndExcluding": "4.5", "versionStartIncluding": "4.4.179", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "45D4AD0D-21B3-4139-AA68-A1925A10D911", "versionEndExcluding": "4.10", "versionStartIncluding": "4.9.170", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7AA9A171-0F5C-4CEA-BD42-0B9EAB8DC3B1", "versionEndExcluding": "4.15", "versionStartIncluding": "4.14.113", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "387C46BB-0E5E-4E4D-8748-0C4C5293887D", "versionEndExcluding": "5.10.258", "versionStartIncluding": "4.19.36", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "919C10A9-7951-4A74-BADD-C135A0A8D8B4", "versionEndExcluding": "5.15.209", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "92385813-D91D-480D-83A1-F423D2CBB2BA", "versionEndExcluding": "6.1.175", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1A92866-F406-43B5-B2D1-CFC274753E9D", "versionEndExcluding": "6.6.140", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "5AFBE0EC-CCDF-4207-AE92-ABF958125CA4", "versionEndExcluding": "6.12.88", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF39AE08-AE6D-4410-8FBE-76F6BF5BF55B", "versionEndExcluding": "6.18.30", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0893CA7-9AE6-4DFE-AC75-48967D73AD8E", "versionEndExcluding": "7.0.7", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B1EF7059-E670-45F4-B422-54C40FA86390", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "0D38F0BF-A728-4133-A358-D44A2F7EE6D6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rsi: fix kthread lifetime race between self-exit and external-stop\n\nRSI driver use both self-exit(kthread_complete_and_exit) and external-stop\n(kthread_stop) when killing a kthread. Generally, kthread_stop() is called\nfirst, and in this case, no particular issues occur.\n\nHowever, in rare instances where kthread_complete_and_exit() is called\nfirst and then kthread_stop() is called, a UAF occurs because the kthread\nobject, which has already exited and been freed, is accessed again.\n\nTherefore, to prevent this with minimal modification, you must remove\nkthread_stop() and change the code to wait until the self-exit operation\nis completed."}], "id": "CVE-2026-46187", "lastModified": "2026-06-11T03:06:52.100", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-05-28T10:16:34.333", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/16d9f674c619838bdeae42abc0929c9c5477ea1f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4ac3095da22fc50e51ec10c3b8323c21ab3e441a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4f4c9b13c485abd0a2d2c97f9db339d1dd8e147f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4f697813162d5f9151726a6d2bee82bffe4b0256"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4f9a4ae8d2c198f01611ea376034c326ef43ab56"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/95fcb436586dc3c2983537d557ac05bbc6a027f3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9dfe8a4458a063c6433526bc59112a169eee1aa3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/db57a1aa54ff68669781976e4edb045e09e2b65b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-362"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: wifi: rsi: fix kthread lifetime race between self-exit and external-stop", "id": "2482521", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482521"}, "csaw": false, "cwe": "CWE-366", "details": ["A flaw was found in the Linux kernel's Redpine Signals (RSI) Wi-Fi driver. A race condition, which occurs when multiple operations try to access the same resource simultaneously, exists in the management of kernel threads (kthreads), lightweight processes within the kernel. This can lead to a Use-After-Free (UAF) vulnerability, where the system attempts to use memory that has already been released. Exploitation of this flaw could allow an attacker to cause a system crash (denial of service) or potentially execute unauthorized code, leading to a complete system compromise."], "name": "CVE-2026-46187", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-28T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-46187\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-46187\nhttps://lore.kernel.org/linux-cve-announce/2026052831-CVE-2026-46187-98f9@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4c62764d0fc21a34ffc44eec1210038c3a2e4473,95fcb436586dc3c2983537d557ac05bbc6a027f3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4c62764d0fc21a34ffc44eec1210038c3a2e4473,16d9f674c619838bdeae42abc0929c9c5477ea1f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4c62764d0fc21a34ffc44eec1210038c3a2e4473,4f9a4ae8d2c198f01611ea376034c326ef43ab56)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4c62764d0fc21a34ffc44eec1210038c3a2e4473,4f4c9b13c485abd0a2d2c97f9db339d1dd8e147f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4c62764d0fc21a34ffc44eec1210038c3a2e4473,db57a1aa54ff68669781976e4edb045e09e2b65b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "d8f70ad66032363e3edceee81a7be2aaccb2d7f5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "ec759c0015fb7d4f5c7cb5711d2c8905724c7983"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "c8ed05b1d8520f40395916438da9b38ce937a896"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "ad78e2e057ab8d914a2b5e3e6acf29c3c8a428a3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "de1fd69b6541ff61177114d63af7ea719c426cf0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[3.18.139,3.19)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.4.179,4.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.9.170,4.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.14.113,4.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.19.36,4.20)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.20"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.20)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.140,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.88,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.30,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.7,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-28T12:45:06.858809+00:00", "updated": "2026-06-11T05:30:06.201359+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}