CVE-2026-90378

CVE-2026-90378

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt792x: Fix memory leak in SDIO TX path

When tx_prepare_skb() returns an error in the SDIO TX path, the

skb is not freed, leading to a memory leak. This can occur when

zero-length frames (such as WNM NULL frames) are dropped to prevent

potential hardware TX hangs.

Fix this by properly releasing the skb with ieee80211_tx_status_ext()

when tx_prepare_skb() fails.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Published
2026-09-17T21:17Z
References (7)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:09Z
    wifi: mt76: mt792x: Fix memory leak in SDIO TX path
    cvelistv5