Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-90361

wifi: ath11k: fix leak in ath11k_service_ready_ext_event()

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix leak in ath11k_service_ready_ext_event() Currently, during ath11k_service_ready_ext_event() processing, svc_rdy_ext.mac_phy_caps can be allocated during TLV parsing. This is a temporary allocation that is freed on the success path, but not on the error path. If parsing succeeds far enough to allocate mac_phy_caps and then fails on a later TLV, the allocation leaks. So free the allocation on the error path. Compile tested only.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5b90fc760db5a969ed26d70f8e62c91915f012bd to < 35cb3086b426b3468cfc32d0d8d9883409705ea9affected
  • 5b90fc760db5a969ed26d70f8e62c91915f012bd to < 854eb9053a793b73c4e8082e1923735a80c77bcdaffected
  • 5b90fc760db5a969ed26d70f8e62c91915f012bd to < 7dbf0bc50cf3ddd039becd875691bb7f484fa004affected
  • 5b90fc760db5a969ed26d70f8e62c91915f012bd to < 1296cae53052881ddd571a9d4f467a16ebfb7f14affected
  • 5b90fc760db5a969ed26d70f8e62c91915f012bd to < 10ccd92825504c029390874c6fb84c62d9f263f9affected
  • 5b90fc760db5a969ed26d70f8e62c91915f012bd to < f5bb3471c9f46c6cabc06a152c13fc518330913eaffected
  • 5b90fc760db5a969ed26d70f8e62c91915f012bd to < 047a817147806140cdef5fa25d69d7b7a24f905caffected
  • 5b90fc760db5a969ed26d70f8e62c91915f012bd to < 0293be2212d319d59589082461abf2a9b626cd1caffected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.270 to ≤ 5.10.*unaffected
  • 5.15.221 to ≤ 5.15.*unaffected
  • 6.1.188 to ≤ 6.1.*unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References