{"id":"CVE-2025-68765","state":"PUBLISHED","title":"mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()\n\nIn mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated. If the\nsubsequent call to mt76_connac_mcu_alloc_wtbl_req() fails, the function\nreturns an error without freeing sskb, leading to a memory leak.\n\nFix this by calling dev_kfree_skb() on sskb in the error handling path\nto ensure it is properly released.","publishedAt":"2026-01-05T09:44:13.242Z","updatedAt":"2026-05-11T21:52:55.118Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"d6c91fc732698642f70c688324c98551b97b412c","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"594ff8bb69e239678a8baa461827ce4bb90eff8f","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"1c3c234af9407256ed670c8752923a672eea4225","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"278bfed4529a0c9c9119f5a52ddafe69db61a75c","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"fb905e69941b44e03fe1a24e95328d45442b6d6d","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"53d1548612670aa8b5d89745116cc33d9d172863","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/mediatek/mt76/mt7615/mcu.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.7","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.7","versionType":"semver"},{"version":"5.15.198","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.160","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.120","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.63","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.17.13","status":"unaffected","lessThanOrEqual":"6.17.*","versionType":"semver"},{"version":"6.18.2","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/mediatek/mt76/mt7615/mcu.c"]}],"references":["https://git.kernel.org/stable/c/d6c91fc732698642f70c688324c98551b97b412c","https://git.kernel.org/stable/c/594ff8bb69e239678a8baa461827ce4bb90eff8f","https://git.kernel.org/stable/c/1c3c234af9407256ed670c8752923a672eea4225","https://git.kernel.org/stable/c/278bfed4529a0c9c9119f5a52ddafe69db61a75c","https://git.kernel.org/stable/c/fb905e69941b44e03fe1a24e95328d45442b6d6d","https://git.kernel.org/stable/c/4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49","https://git.kernel.org/stable/c/53d1548612670aa8b5d89745116cc33d9d172863"],"weaknesses":[],"ingestedAt":"2026-10-29T20:09:56.034Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/68xxx/CVE-2025-68765.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-68765","state":"PUBLISHED","datePublished":"2026-01-05T09:44:13.242Z","dateUpdated":"2026-05-11T21:52:55.118Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-24T10:30:51.034Z"},"containers":{"cna":{"title":"mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()\n\nIn mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated. If the\nsubsequent call to mt76_connac_mcu_alloc_wtbl_req() fails, the function\nreturns an error without freeing sskb, leading to a memory leak.\n\nFix this by calling dev_kfree_skb() on sskb in the error handling path\nto ensure it is properly released."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"d6c91fc732698642f70c688324c98551b97b412c","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"594ff8bb69e239678a8baa461827ce4bb90eff8f","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"1c3c234af9407256ed670c8752923a672eea4225","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"278bfed4529a0c9c9119f5a52ddafe69db61a75c","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"fb905e69941b44e03fe1a24e95328d45442b6d6d","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49","versionType":"git"},{"version":"99c457d902cf90bdc0df5d57e6156ec108711068","status":"affected","lessThan":"53d1548612670aa8b5d89745116cc33d9d172863","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/mediatek/mt76/mt7615/mcu.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.7","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.7","versionType":"semver"},{"version":"5.15.198","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.160","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.120","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.63","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.17.13","status":"unaffected","lessThanOrEqual":"6.17.*","versionType":"semver"},{"version":"6.18.2","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/mediatek/mt76/mt7615/mcu.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/d6c91fc732698642f70c688324c98551b97b412c"},{"url":"https://git.kernel.org/stable/c/594ff8bb69e239678a8baa461827ce4bb90eff8f"},{"url":"https://git.kernel.org/stable/c/1c3c234af9407256ed670c8752923a672eea4225"},{"url":"https://git.kernel.org/stable/c/278bfed4529a0c9c9119f5a52ddafe69db61a75c"},{"url":"https://git.kernel.org/stable/c/fb905e69941b44e03fe1a24e95328d45442b6d6d"},{"url":"https://git.kernel.org/stable/c/4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49"},{"url":"https://git.kernel.org/stable/c/53d1548612670aa8b5d89745116cc33d9d172863"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T21:52:55.118Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7","versionEndExcluding":"5.15.198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7","versionEndExcluding":"6.1.160"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7","versionEndExcluding":"6.6.120"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7","versionEndExcluding":"6.12.63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7","versionEndExcluding":"6.17.13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7","versionEndExcluding":"6.18.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7","versionEndExcluding":"6.19"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}