20 matches found
CVE-2026-90378
A flaw was found in the Linux kernel's mt76 wireless driver, specifically in the mt792x SDIO TX path. When the txprepareskb function fails to prepare a socket buffer skb for transmission, the skb is not properly released. This memory leak can lead to resource exhaustion, potentially causing a...
SUSE CVE-2026-90378
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames such as WNM NULL frames are droppe...
SUSE CVE-2026-90380
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: fix use-after-free in mt76rxpollcomplete A use-after-free issue occurs in mt76rxpollcomplete due to a race condition. The STA has already been removed, but the rxstatus still had a pointer to the wcid in the...
Linux Distros Unpatched Vulnerability : CVE-2026-90378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This...
Linux Distros Unpatched Vulnerability : CVE-2026-90380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt792x: fix use-after-free in mt76rxpollcomplete A use-after-free issue occurs in mt76rxpollcomplete due to a race condition. The STA has already be...
DEBIAN-CVE-2026-90378
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames such as WNM NULL frames are droppe...
AZL-102897 CVE-2026-90378 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames such as WNM NULL frames are droppe...
CVE-2026-90378
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames such as WNM NULL frames are droppe...
CVE-2026-90380 wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: fix use-after-free in mt76rxpollcomplete A use-after-free issue occurs in mt76rxpollcomplete due to a race condition. The STA has already been removed, but the rxstatus still had a pointer to the wcid in the...
CVE-2026-90380
CVE-2026-90380 is a use-after-free in the Linux kernel's mt76 WiFi driver (mt792x variant), occurring in mt76_rx_poll_complete due to a race condition: a station (STA) is removed but rx_status still holds a pointer to the freed wcid. The fix sets the links' wcid pointers to NULL in mt7925_sta_pre...
CVE-2026-90378 wifi: mt76: mt792x: Fix memory leak in SDIO TX path
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames such as WNM NULL frames are droppe...
CVE-2026-90378 wifi: mt76: mt792x: Fix memory leak in SDIO TX path
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames such as WNM NULL frames are droppe...
CVE-2026-90378
CVE-2026-90378 affects the Linux kernel 's mt76/mt792x WiFi driver in its SDIO TX path . The root cause is a memory leak : when tx_prepare_skb() returns an error, the socket buffer (skb) is not freed. This can be triggered when zero-length frames (such as WNM NULL frames) are dropped to prevent p...
EUVD-2026-82039
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames such as WNM NULL frames are droppe...
CVE-2026-90380: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: fix use-after-free in mt76rxpollcomplete A use-after-free issue occurs in mt76rxpollcomplete due to a race condition. The STA has already been removed, but the rxstatus still had a pointer to the wcid in the...
PT-2026-94726
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the SDIO TX path of the mt792x wifi driver. The issue occurs when the tx prepare skb function returns an error, causing the socket buffer skb to remain unreleased...
CVE-2026-90378: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt792x: Fix memory leak in SDIO TX path When txprepareskb returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames such as WNM NULL frames are droppe...
PT-2026-69711
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7925 sta set decap offload function when updating the decap offload state for a Multi-Link Operation MLO station. The function iterates over the virtual interfac...
PT-2025-16672
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.13 Description A kernel panic is caused by a null pointer dereference in the mt792x rx get wcid function. The issue arises because the deflink structure is not properly initialized with the sta context. This...
ROS-20241028-04
A vulnerability in the tcp component of the Linux operating system kernel is related to excessive output in the function sockprotinuseadd in net/ipv4/inethashtables.c. Exploitation of the vulnerability could allow an attacker to gain access to confidential information A vulnerability in the btrtl...