CVE-2026-90361

wifi: ath11k: fix leak in ath11k_service_ready_ext_event()

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix leak in ath11k_service_ready_ext_event()

Currently, during ath11k_service_ready_ext_event() processing, svc_rdy_ext.mac_phy_caps can be allocated during TLV parsing. This is a temporary allocation that is freed on the success path, but not on the error path. If parsing succeeds far enough to allocate mac_phy_caps and then fails on a later TLV, the allocation leaks. So free the allocation on the error path.

Compile tested only.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5b90fc760db5a969ed26d70f8e62c91915f012bd to before 35cb3086b426b3468cfc32d0d8d9883409705ea9Affected 5b90fc760db5a969ed26d70f8e62c91915f012bd to before 854eb9053a793b73c4e8082e1923735a80c77bcdAffected 5b90fc760db5a969ed26d70f8e62c91915f012bd to before 7dbf0bc50cf3ddd039becd875691bb7f484fa004Affected 5b90fc760db5a969ed26d70f8e62c91915f012bd to before 1296cae53052881ddd571a9d4f467a16ebfb7f14Affected 5b90fc760db5a969ed26d70f8e62c91915f012bd to before 10ccd92825504c029390874c6fb84c62d9f263f9Affected 5b90fc760db5a969ed26d70f8e62c91915f012bd to before f5bb3471c9f46c6cabc06a152c13fc518330913eAffected 5b90fc760db5a969ed26d70f8e62c91915f012bd to before 047a817147806140cdef5fa25d69d7b7a24f905cAffected 5b90fc760db5a969ed26d70f8e62c91915f012bd to before 0293be2212d319d59589082461abf2a9b626cd1cAffected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

5b90fc760db5a969ed26d70f8e62c91915f012bd to before 35cb3086b426b3468cfc32d0d8d9883409705ea9Affected
5b90fc760db5a969ed26d70f8e62c91915f012bd to before 854eb9053a793b73c4e8082e1923735a80c77bcdAffected
5b90fc760db5a969ed26d70f8e62c91915f012bd to before 7dbf0bc50cf3ddd039becd875691bb7f484fa004Affected
5b90fc760db5a969ed26d70f8e62c91915f012bd to before 1296cae53052881ddd571a9d4f467a16ebfb7f14Affected
5b90fc760db5a969ed26d70f8e62c91915f012bd to before 10ccd92825504c029390874c6fb84c62d9f263f9Affected
5b90fc760db5a969ed26d70f8e62c91915f012bd to before f5bb3471c9f46c6cabc06a152c13fc518330913eAffected
5b90fc760db5a969ed26d70f8e62c91915f012bd to before 047a817147806140cdef5fa25d69d7b7a24f905cAffected
5b90fc760db5a969ed26d70f8e62c91915f012bd to before 0293be2212d319d59589082461abf2a9b626cd1cAffected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.