CVE-2023-53466 wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix memory leak in mt7915mcuexit Always purge mcu skb queues in mt7915mcuexit routine even if mt7915firmwarestate fails...

CVE-2023-53460

CVE-2023-53460 describes a memory-leak in the Linux kernel wifi driver rt w88 (rtw_usb_probe) in drivers/net/wireless/realtek/rtw88/usb.c:876, where an allocated hw structure may not be released on a path, reported as the line 811 release issue. The root cause is a leak in the USB probe path (rtw...

CVE-2023-53452 wifi: rtw89: fix potential race condition between napi_init and napi_enable

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential race condition between napiinit and napienable A race condition can happen if netdev is registered, but NAPI isn't initialized yet, and meanwhile user space starts the netdev that will enable NAPI. Then...

CVE-2023-53452

Observation: CVE-2023-53452 concerns a race condition in the Linux kernel affecting the wifi driver path for rtW89. When a netdev is registered but NAPI isn’t initialized yet, a race can occur if user space opens the netdev and enables NAPI, causing a kernel BUG at net/core/dev.c:6423 and an inva...

CVE-2022-50424 wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: resource leaks at mt7921checkoffloadcapability Fixed coverity issue with resource leaks at variable "fw" going out of scope leaks the storage it points to mt7921checkoffloadcapability. Addresses-Coverity-ID:...

CVE-2022-50424

CVE-2022-50424 affects the Linux kernel WiFi driver for MT7921 (mt76/mt7921). The issue is a resource leak in mt7921_check_offload_capability() where a fw/allocated storage goes out of scope, leaking memory. The vulnerability is described as resolved/fixed via a Coverity-related fix (Addresses-Co...

CVE-2022-50424 wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: resource leaks at mt7921checkoffloadcapability Fixed coverity issue with resource leaks at variable "fw" going out of scope leaks the storage it points to mt7921checkoffloadcapability. Addresses-Coverity-ID:...

UBUNTU-CVE-2025-39918

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list...

CVE-2025-39918 wifi: mt76: fix linked list corruption

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list...

CVE-2025-39891 wifi: mwifiex: Initialize the chan_stats array to zero

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chanstats array to zero The adapter-chanstats array is initialized in mwifiexinitchannelscangap with vmalloc, which doesn't zero out memory. The array is filled in mwifiexupdatechanstatistics and the...

CVE-2025-39891

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chanstats array to zero The adapter-chanstats array is initialized in mwifiexinitchannelscangap with vmalloc, which doesn't zero out memory. The array is filled in mwifiexupdatechanstatistics and the...

PT-2025-40174

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak exists in the rtw89 append probe req ie function within the Linux kernel’s Wi-Fi component. The issue occurs when failing to free allocated memory new before...

CVE-2025-39890

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kservicereadyextevent Currently, in ath12kservicereadyextevent, svcrdyext.macphycaps is not freed in the failure case, causing a memory leak. The following trace is observed in kmemleak:...

CVE-2025-39890

CVE-2025-39890 fixes a memory leak in the Linux kernel’s ath12k driver. In ath12k_service_ready_ext_event(), the code path that handles a failure does not free svc_rdy_ext.mac_phy_caps, leading to a leaked 1024-byte object reported by kmemleak. The patch ensures that mac_phy_caps is freed in erro...

wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work

...

wifi: mt76: mt7915: fix list corruption after hardware restart

...

wifi: iwlwifi: mvm: ensure offloading TID queue exists

...

SUSE CVE-2023-53430

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: dma: fix memory leak running mt76dmatxcleanup Fix device unregister memory leak and alway cleanup all configured rx queues in mt76dmatxcleanup routine...

CVE-2025-39862

The CVE-2025-39862 entry pertains to the Linux kernel WiFi driver mt76/mt7915, where list corruption could occur after hardware restart. The identified fix clears all WCID-related lists and resets each wcid entry (wcid->sta = 0) before ieee80211_restart_hw, ensuring stations aren’t re-added pr...

CVE-2025-39862 wifi: mt76: mt7915: fix list corruption after hardware restart

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix list corruption after hardware restart Since stations are recreated from scratch, all lists that wcids are added to must be cleared before calling ieee80211restarthw. Set wcid-sta = 0 for each wcid entry i...