« Volver al listado

CVE-2026-90378

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt792x: Fix memory leak in SDIO TX path

When tx_prepare_skb() returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames (such as WNM NULL frames) are dropped to prevent potential hardware TX hangs.

Fix this by properly releasing the skb with ieee80211_tx_status_ext() when tx_prepare_skb() fails.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-90378",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "b747fa343817fd322b4463dda99d28fc51e19c52",
              "lessThan": "b64d196280aff8494ba6fb387e37b18479c99b83",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b747fa343817fd322b4463dda99d28fc51e19c52",
              "lessThan": "9ef1351209d42b7d96604f2a13d7ea8215a24e07",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b747fa343817fd322b4463dda99d28fc51e19c52",
              "lessThan": "c2c7f16f2c62f79f7c381e500afa7123580742a5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b747fa343817fd322b4463dda99d28fc51e19c52",
              "lessThan": "6a8000c76dc34490a2bb321ad1a5f882a2ccab7c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b747fa343817fd322b4463dda99d28fc51e19c52",
              "lessThan": "ddf6a17d8e3d0dbb841c13c10d7c1340a138a80d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b747fa343817fd322b4463dda99d28fc51e19c52",
              "lessThan": "6a342db7a6502bc6781579145e05d4d4731786ab",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b747fa343817fd322b4463dda99d28fc51e19c52",
              "lessThan": "808f2767d4217a5b96f674288573b9b89d432eed",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/net/wireless/mediatek/mt76/sdio.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.12",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/net/wireless/mediatek/mt76/sdio.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-17T17:17:37.040",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/6a342db7a6502bc6781579145e05d4d4731786ab",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6a8000c76dc34490a2bb321ad1a5f882a2ccab7c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/808f2767d4217a5b96f674288573b9b89d432eed",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9ef1351209d42b7d96604f2a13d7ea8215a24e07",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b64d196280aff8494ba6fb387e37b18479c99b83",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c2c7f16f2c62f79f7c381e500afa7123580742a5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ddf6a17d8e3d0dbb841c13c10d7c1340a138a80d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt792x: Fix memory leak in SDIO TX path\n\nWhen tx_prepare_skb() returns an error in the SDIO TX path, the\nskb is not freed, leading to a memory leak. This can occur when\nzero-length frames (such as WNM NULL frames) are dropped to prevent\npotential hardware TX hangs.\n\nFix this by properly releasing the skb with ieee80211_tx_status_ext()\nwhen tx_prepare_skb() fails."
    }
  ],
  "lastModified": "2026-09-17T17:17:37.040",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}