Riskcovery

CVE-2026-98426

wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path

State
Published
Severity
Not scored
Published
Oct 14, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path

mwifiex_pcie_request_irq() registers each MSI-X vector with a per-index dev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop "for (j = 0; j < i; j++)" frees msix_entries[j].vector but passes the failed index's &card->msix_ctx[i] as the dev_id. free_irq() matches on (irq, dev_id), so it fails to find the action registered with &card->msix_ctx[j]: the already-requested IRQ j is not freed (leaked) and free_irq() warns about freeing a non-existent IRQ. Use &card->msix_ctx[j].

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 99074fc1e67b374b5c72406a23ac01fed806d634 to before 11bc2cbb14f450eaa47cce9eb086f948ef8f4bcdAffected
  • 99074fc1e67b374b5c72406a23ac01fed806d634 to before 1a60cb2292194cc9eafae7ca8a8a72d37ae78d97Affected
  • 99074fc1e67b374b5c72406a23ac01fed806d634 to before fcac5813f324cd07dfd36b4adf624fc70f7587d6Affected
  • 99074fc1e67b374b5c72406a23ac01fed806d634 to before 2761b21cb896b1da8dd46cee5084c9032b2d7098Affected
  • 99074fc1e67b374b5c72406a23ac01fed806d634 to before 5fd4cc87e6cc0839aac89c24ebe39ce262fe088fAffected
  • 99074fc1e67b374b5c72406a23ac01fed806d634 to before 0969c9688389f2e0f65b1a924b0dd6625a3bb776Affected
  • 99074fc1e67b374b5c72406a23ac01fed806d634 to before 03d5e4776e8b71c2468c5c3c48b39202c87a8796Affected
  • 99074fc1e67b374b5c72406a23ac01fed806d634 to before a3d722190cdef18da4878b5efc27c3c386dda248Affected
LinuxLinux
  • 4.6Affected
  • before 4.6Not affected
  • 5.10.271 through 5.10.*Not affected
  • 5.15.222 through 5.15.*Not affected
  • 6.1.189 through 6.1.*Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.112 through 6.12.*Not affected
  • 6.18.54 through 6.18.*Not affected
  • 7.2.8 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.