« Volver al listado

CVE-2026-72004

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix memory leak in ieee80211_register_hw()

If kmemdup() fails while copying supported band structures, the error path jumps to fail_rate. This skips rate_control_deinitialize() and leaks the initialized local->rate_ctrl.

Fix this by adding a fail_band label that shares the rate-control cleanup path before falling through to the remaining teardown.

The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc7.

Leer descripción completaMostrar menos

An x86_64 allyesconfig build showed no new warnings. As we do not have a suitable mac80211 device/driver combination to test with, no runtime testing was able to be performed.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-72004",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "09b4a4faf9d037990ac4f8110dd944b27b42d5df",
              "lessThan": "f01eec75fd372961550b928902f3a2c11fca1daf",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "09b4a4faf9d037990ac4f8110dd944b27b42d5df",
              "lessThan": "3d8b9b290421c3cd505fcd2f551f143f8142786a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "09b4a4faf9d037990ac4f8110dd944b27b42d5df",
              "lessThan": "08b71bd92317f99642b842cfc0d30200868162fc",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "09b4a4faf9d037990ac4f8110dd944b27b42d5df",
              "lessThan": "a02b52fe54f7b5107aefa1ce28c2f69749c57616",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "09b4a4faf9d037990ac4f8110dd944b27b42d5df",
              "lessThan": "45e9ac538cdff7bce656d731114a64eda85af0d7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "09b4a4faf9d037990ac4f8110dd944b27b42d5df",
              "lessThan": "bdc0b8bfdc142439d6708b072e8159eb515ee7b0",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "09b4a4faf9d037990ac4f8110dd944b27b42d5df",
              "lessThan": "a7584f261e64fe14e45bdf70f343e16c1ee3a037",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "09b4a4faf9d037990ac4f8110dd944b27b42d5df",
              "lessThan": "95fc02722edde02946d0d475221f2b2054d3d8ba",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "net/mac80211/main.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "4.20",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "net/mac80211/main.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-08-15T06:20:58.987",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/08b71bd92317f99642b842cfc0d30200868162fc",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/3d8b9b290421c3cd505fcd2f551f143f8142786a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/45e9ac538cdff7bce656d731114a64eda85af0d7",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/95fc02722edde02946d0d475221f2b2054d3d8ba",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a02b52fe54f7b5107aefa1ce28c2f69749c57616",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a7584f261e64fe14e45bdf70f343e16c1ee3a037",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bdc0b8bfdc142439d6708b072e8159eb515ee7b0",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f01eec75fd372961550b928902f3a2c11fca1daf",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix memory leak in ieee80211_register_hw()\n\nIf kmemdup() fails while copying supported band structures, the error\npath jumps to fail_rate. This skips rate_control_deinitialize() and\nleaks the initialized local->rate_ctrl.\n\nFix this by adding a fail_band label that shares the rate-control cleanup\npath before falling through to the remaining teardown.\n\nThe bug was first flagged by an experimental analysis tool we are\ndeveloping for kernel memory-management bugs while analyzing\nv6.13-rc1. The tool is still under development and is not yet publicly\navailable. Manual inspection confirms that the bug is still present in\nv7.1-rc7.\n\nAn x86_64 allyesconfig build showed no new warnings. As we do not have a\nsuitable mac80211 device/driver combination to test with, no runtime\ntesting was able to be performed."
    }
  ],
  "lastModified": "2026-08-17T06:17:57.830",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}