CVE-2026-53102CWE-401

CVE-2026-53102

Medium · published June 24, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()

mt76_connac_mcu_alloc_sta_req() allocates an skb which is expected to

be freed eventually by mt76_mcu_skb_send_msg(). However, currently if

an intermediate function fails before sending, the allocated skb is

leaked.

Specifically, mt76_connac_mcu_sta_wed_update() and

mt76_connac_mcu_sta_key_tlv() may fail, leading to an immediate memory

leak in the error path.

Fix this by explicitly freeing the skb in these error paths.

Commit 7c0f63fe37a5 ("wifi: mt76: mt7996: fix memory leak on

mt7996_mcu_sta_key_tlv error") made a similar change.

Compile tested only. Issue found using a prototype static analysis tool

and code review.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00122 · 1.9th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-06-24T21:17Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 5.18, < 7.0.107.0.10
References (5)
EPSS history
Timeline
  • 24 JUN 16:30Z
    wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()
    cvelistv5