{"id":"CVE-2026-90378","revision":"420f0a88f1bf406483614d9f84de3667","records":[{"revision":"420f0a88f1bf406483614d9f84de3667","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-90378","aliases":[],"title":"wifi: mt76: mt792x: Fix memory leak in SDIO TX path","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt792x: Fix memory leak in SDIO TX path\n\nWhen tx_prepare_skb() returns an error in the SDIO TX path, the\nskb is not freed, leading to a memory leak. This can occur when\nzero-length frames (such as WNM NULL frames) are dropped to prevent\npotential hardware TX hangs.\n\nFix this by properly releasing the skb with ieee80211_tx_status_ext()\nwhen tx_prepare_skb() fails.","state":0,"publishedAt":"2026-09-17T16:09:16.655+00:00","modifiedAt":"2026-10-19T09:02:36.822+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/mediatek/mt76/sdio.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"b747fa343817fd322b4463dda99d28fc51e19c52\",\n                            \"lessThan\": \"b64d196280aff8494ba6fb387e37b18479c99b83\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b747fa343817fd322b4463dda99d28fc51e19c52\",\n                            \"lessThan\": \"9ef1351209d42b7d96604f2a13d7ea8215a24e07\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b747fa343817fd322b4463dda99d28fc51e19c52\",\n                            \"lessThan\": \"c2c7f16f2c62f79f7c381e500afa7123580742a5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b747fa343817fd322b4463dda99d28fc51e19c52\",\n                            \"lessThan\": \"6a8000c76dc34490a2bb321ad1a5f882a2ccab7c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b747fa343817fd322b4463dda99d28fc51e19c52\",\n                            \"lessThan\": \"ddf6a17d8e3d0dbb841c13c10d7c1340a138a80d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b747fa343817fd322b4463dda99d28fc51e19c52\",\n                            \"lessThan\": \"6a342db7a6502bc6781579145e05d4d4731786ab\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b747fa343817fd322b4463dda99d28fc51e19c52\",\n                            \"lessThan\": \"808f2767d4217a5b96f674288573b9b89d432eed\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/mediatek/mt76/sdio.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.221\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/b64d196280aff8494ba6fb387e37b18479c99b83","https://git.kernel.org/stable/c/9ef1351209d42b7d96604f2a13d7ea8215a24e07","https://git.kernel.org/stable/c/c2c7f16f2c62f79f7c381e500afa7123580742a5","https://git.kernel.org/stable/c/6a8000c76dc34490a2bb321ad1a5f882a2ccab7c","https://git.kernel.org/stable/c/ddf6a17d8e3d0dbb841c13c10d7c1340a138a80d","https://git.kernel.org/stable/c/6a342db7a6502bc6781579145e05d4d4731786ab","https://git.kernel.org/stable/c/808f2767d4217a5b96f674288573b9b89d432eed"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-90378","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-90378","identifiers":["CVE-2026-90378"]},"retained":false,"historicalAffected":[]}],"coverage":[]}