{"id":"CVE-2026-98426","revision":"77055d10b9df4b79800c5703c1b92ee9","records":[{"revision":"77055d10b9df4b79800c5703c1b92ee9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98426","aliases":[],"title":"wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path\n\nmwifiex_pcie_request_irq() registers each MSI-X vector with a per-index\ndev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop\n\"for (j = 0; j < i; j++)\" frees msix_entries[j].vector but passes the\nfailed index's &card->msix_ctx[i] as the dev_id. free_irq() matches on\n(irq, dev_id), so it fails to find the action registered with\n&card->msix_ctx[j]: the already-requested IRQ j is not freed (leaked) and\nfree_irq() warns about freeing a non-existent IRQ. Use &card->msix_ctx[j].","state":0,"publishedAt":"2026-10-14T13:27:53.177+00:00","modifiedAt":"2026-10-19T09:19:20.215+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/marvell/mwifiex/pcie.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"99074fc1e67b374b5c72406a23ac01fed806d634\",\n                            \"lessThan\": \"11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"99074fc1e67b374b5c72406a23ac01fed806d634\",\n                            \"lessThan\": \"1a60cb2292194cc9eafae7ca8a8a72d37ae78d97\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"99074fc1e67b374b5c72406a23ac01fed806d634\",\n                            \"lessThan\": \"fcac5813f324cd07dfd36b4adf624fc70f7587d6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"99074fc1e67b374b5c72406a23ac01fed806d634\",\n                            \"lessThan\": \"2761b21cb896b1da8dd46cee5084c9032b2d7098\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"99074fc1e67b374b5c72406a23ac01fed806d634\",\n                            \"lessThan\": \"5fd4cc87e6cc0839aac89c24ebe39ce262fe088f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"99074fc1e67b374b5c72406a23ac01fed806d634\",\n                            \"lessThan\": \"0969c9688389f2e0f65b1a924b0dd6625a3bb776\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"99074fc1e67b374b5c72406a23ac01fed806d634\",\n                            \"lessThan\": \"03d5e4776e8b71c2468c5c3c48b39202c87a8796\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"99074fc1e67b374b5c72406a23ac01fed806d634\",\n                            \"lessThan\": \"a3d722190cdef18da4878b5efc27c3c386dda248\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/wireless/marvell/mwifiex/pcie.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.6\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.6\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.271\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.222\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.112\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.54\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.8\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd","https://git.kernel.org/stable/c/1a60cb2292194cc9eafae7ca8a8a72d37ae78d97","https://git.kernel.org/stable/c/fcac5813f324cd07dfd36b4adf624fc70f7587d6","https://git.kernel.org/stable/c/2761b21cb896b1da8dd46cee5084c9032b2d7098","https://git.kernel.org/stable/c/5fd4cc87e6cc0839aac89c24ebe39ce262fe088f","https://git.kernel.org/stable/c/0969c9688389f2e0f65b1a924b0dd6625a3bb776","https://git.kernel.org/stable/c/03d5e4776e8b71c2468c5c3c48b39202c87a8796","https://git.kernel.org/stable/c/a3d722190cdef18da4878b5efc27c3c386dda248"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98426","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98426","identifiers":["CVE-2026-98426"]},"retained":false,"historicalAffected":[]}],"coverage":[]}