CVE-2026-53104CWE-401

CVE-2026-53104

Medium · published June 24, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix memory leak destroying device

All MT76 rx queues have an associated page_pool even if the queue is not

associated to a NAPI (e.g. WED RRO queues with WED enabled). Destroy the

page_pool running mt76_dma_cleanup routine during module unload.

Moreover returns pages to the page pool if WED is not enabled for WED RRO

queues.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-06-24T21:17Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.18.336.18.33
linux/linux_kernel≥ 6.19, < 7.0.107.0.10
References (4)
https://git.kernel.org/stable/c/3c363fc4dbdb77a3f02dcf6ba90c1f0a111ef055 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4b7c92fd8b8700fac387ff43c6f6e0c4e05ec93f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6b470f36616e3448d44b0ef4b1de2a3e3a31b5be · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dcbc13d19bef3326c72f324b10f5a3e5fc4d71de · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 24 JUN 16:30Z
    wifi: mt76: Fix memory leak destroying device
    cvelistv5