CVE-2026-64117 addresses a use-after-free vulnerability in the Linux kernel's mac80211 WiFi component. The function ieee80211_invoke_fast_rx() reads RX status through IEEE80211_SKB_RXCB(skb), which shares the same skb->cb storage that ieee80211_rx_mesh_data() later reuses as IEEE80211_TX_INFO. In the unicast forwarding path, ieee80211_rx_mesh_data() zeroes or frees this memory before the caller uses it, causing a kernel address sanitizer (KASAN) detected use-after-free in ieee80211_prepare_and_rx_handle. The vulnerability is fixed by encoding the RX rate from the status before calling ieee80211_rx_mesh_data(), ensuring the RX_QUEUED path accesses valid memory.

This vulnerability can lead to a kernel use-after-free condition, which may cause system instability or crashes. While no known exploits are reported, such memory corruption issues could potentially be leveraged for privilege escalation or denial of service under certain conditions.

A fix has been implemented in the Linux kernel to address this vulnerability by capturing the RX rate before reuse of skb->cb memory. Users should apply the official Linux kernel updates that include this patch to remediate the issue. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor's advisory or Linux kernel mailing lists for the specific fixed versions and update accordingly.