CVE-2026-74323

wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()

State: Published
Severity: 8.8 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()

If link_conf or link_sta lookup fails in mt7996_tx_prepare_skb routine, mt7996 driver leaks an already allocated tx token. Fix the issue releasing the token in case of error.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7ef0c7ad735b0c38140259519a3f165bee2b857c to before 06e65d6cf80490bc0457d339595d1ed5a89e8899Affected 7ef0c7ad735b0c38140259519a3f165bee2b857c to before fa0e9aa92a7bc97fc42014c5efaaf1278fa92723Affected 7ef0c7ad735b0c38140259519a3f165bee2b857c to before 831074096d0450308357271fc0ffd3f600a2487eAffected
LinuxLinux	6.18Affected before 6.18Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.