vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-80941

wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()

N/A
Published: September 11, 2026 at 07:42 PM UTC
Updated: October 19, 2026 at 09:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() The skb passed to the rtw_hci_tx_write() is expected to be freed when the function fails, but the error path in rtw_txq_push_skb() does not free the skb before returning. This can lead to a memory leak in rtw_txq_push() where a dequeued skb is passed to rtw_txq_push_skb().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
5.7aaab5d0e673749f82ff34e5f15ea8a689789a9ce
Vendor states this is fixed in 51d8b35574721cf3fe744f46ebd9629916063fee (fixed)
Vendor states this is fixed in 68676ce3313b74326fbcf21c673728db4c19d3cf (fixed)
Vendor states this is fixed in 6e95852f904edbabf411793093fcfd6f6d49ef27 (fixed)
Vendor states this is fixed in 7364713f0931ee45fdf0bea27103b40ccc94979a (fixed)
Vendor states this is fixed in 924e75a420a3000e9f189aed26f67556a62f2d57 (fixed)
Vendor states this is fixed in 9f2948010764d708bda27369d09ce6f194abe8e3 (fixed)
Vendor states this is fixed in c86199357a93b9182854cf805d7780a213fda937 (fixed)
Vendor states this is fixed in e8fd57157ee7a9e2986a9218198a5c1b02f2310b (fixed)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 5.7 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.109 (unaffected)
Vendor states this is fixed in 6.18.50 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.4 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/6e95852f904edbabf411793093fcfd6f6d49ef27
Source: cverecord
https://git.kernel.org/stable/c/7364713f0931ee45fdf0bea27103b40ccc94979a
Source: cverecord
https://git.kernel.org/stable/c/51d8b35574721cf3fe744f46ebd9629916063fee
Source: cverecord
https://git.kernel.org/stable/c/9f2948010764d708bda27369d09ce6f194abe8e3
Source: cverecord
https://git.kernel.org/stable/c/e8fd57157ee7a9e2986a9218198a5c1b02f2310b
Source: cverecord
https://git.kernel.org/stable/c/924e75a420a3000e9f189aed26f67556a62f2d57
Source: cverecord
https://git.kernel.org/stable/c/68676ce3313b74326fbcf21c673728db4c19d3cf
Source: cverecord
https://git.kernel.org/stable/c/c86199357a93b9182854cf805d7780a213fda937

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card