CVE-2026-53102 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() mt76_connac_mcu_alloc_sta_req() allocates an skb which is expected to be freed eventually by mt76_mcu_skb_send_msg(). However, currently if an intermediate function fails before sending, the allocated skb is leaked. Specifically, mt76_connac_mcu_sta_wed_update() and mt76_connac_mcu_sta_key_tlv() may fail, leading to an immediate memory leak in the error path. Fix this by explicitly freeing the skb in these error paths. Commit 7c0f63fe37a5 ("wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error") made a similar change. Compile tested only. Issue found using a prototype static analysis tool and code review.
A memory leak vulnerability has been identified in the Linux kernel's Mediatek Wi-Fi drivers, specifically in the mt76 component. This issue arises in versions of the Linux kernel prior to the latest patch, within the stable tree. The vulnerability occurs in the handling of station (STA) requests, where an allocated socket buffer (skb) is not properly freed if an intermediate function fails before the skb is sent. This leak is particularly evident in the error paths of the mt76_connac_mcu_sta_wed_update() and mt76_connac_mcu_sta_key_tlv() functions, leading to unaddressed memory allocation.
Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been addressed. The specific commit that resolves this issue is c41075ce8cf05ed8c0e7b7efef000dce548ffc42.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/7de35b99503012e57bec027e98ed53f881518b5b | kernel.org | |
| https://git.kernel.org/stable/c/8527ac1bce87aaabde6755e8e6eb2a9f439d1292 | kernel.org | |
| https://git.kernel.org/stable/c/c41075ce8cf05ed8c0e7b7efef000dce548ffc42 | kernel.org | Patch |
| https://git.kernel.org/stable/c/eb466406d2094deefadc2cd6ddb4f6eeb086d1b4 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.18, < 7.0.10 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 7, 2026 | CVE Modified | kernel.org |
| Jul 21, 2026 | Initial Analysis | [email protected] |
| Jun 24, 2026 | New CVE Received | kernel.org |