CVE-2026-90378

wifi: mt76: mt792x: Fix memory leak in SDIO TX path

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt792x: Fix memory leak in SDIO TX path

When tx_prepare_skb() returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames (such as WNM NULL frames) are dropped to prevent potential hardware TX hangs.

Fix this by properly releasing the skb with ieee80211_tx_status_ext() when tx_prepare_skb() fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b747fa343817fd322b4463dda99d28fc51e19c52 to before b64d196280aff8494ba6fb387e37b18479c99b83Affected b747fa343817fd322b4463dda99d28fc51e19c52 to before 9ef1351209d42b7d96604f2a13d7ea8215a24e07Affected b747fa343817fd322b4463dda99d28fc51e19c52 to before c2c7f16f2c62f79f7c381e500afa7123580742a5Affected b747fa343817fd322b4463dda99d28fc51e19c52 to before 6a8000c76dc34490a2bb321ad1a5f882a2ccab7cAffected b747fa343817fd322b4463dda99d28fc51e19c52 to before ddf6a17d8e3d0dbb841c13c10d7c1340a138a80dAffected b747fa343817fd322b4463dda99d28fc51e19c52 to before 6a342db7a6502bc6781579145e05d4d4731786abAffected b747fa343817fd322b4463dda99d28fc51e19c52 to before 808f2767d4217a5b96f674288573b9b89d432eedAffected
LinuxLinux	5.12Affected before 5.12Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

b747fa343817fd322b4463dda99d28fc51e19c52 to before b64d196280aff8494ba6fb387e37b18479c99b83Affected
b747fa343817fd322b4463dda99d28fc51e19c52 to before 9ef1351209d42b7d96604f2a13d7ea8215a24e07Affected
b747fa343817fd322b4463dda99d28fc51e19c52 to before c2c7f16f2c62f79f7c381e500afa7123580742a5Affected
b747fa343817fd322b4463dda99d28fc51e19c52 to before 6a8000c76dc34490a2bb321ad1a5f882a2ccab7cAffected
b747fa343817fd322b4463dda99d28fc51e19c52 to before ddf6a17d8e3d0dbb841c13c10d7c1340a138a80dAffected
b747fa343817fd322b4463dda99d28fc51e19c52 to before 6a342db7a6502bc6781579145e05d4d4731786abAffected
b747fa343817fd322b4463dda99d28fc51e19c52 to before 808f2767d4217a5b96f674288573b9b89d432eedAffected

LinuxLinux

5.12Affected
before 5.12Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.