CVE-2026-98426

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path

mwifiex_pcie_request_irq() registers each MSI-X vector with a per-index

dev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop

"for (j = 0; j < i; j++)" frees msix_entries[j].vector but passes the

failed index's &card->msix_ctx[i] as the dev_id. free_irq() matches on

(irq, dev_id), so it fails to find the action registered with

&card->msix_ctx[j]: the already-requested IRQ j is not freed (leaked) and

free_irq() warns about freeing a non-existent IRQ. Use &card->msix_ctx[j].