CVE-2026-64155
Received Received - Intake

ath11k WMI WOW Call Memory Leak in Linux Kernel

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly return the result of ath11k_wmi_cmd_send(...). Because we did not check the return value, we also did not free the skb in the error path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64155
EUVD
EUVD-2026-45840

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
linux_kernel wifi *-*
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the ath11k WiFi driver. It occurs when certain WMI WOW (Wireless Management Interface Wake-on-Wireless) calls fail to properly free allocated memory (skb) due to unchecked return values from ath11k_wmi_cmd_send. This leads to resource leaks during error conditions.

Detection Guidance

This vulnerability is specific to the Linux kernel's ath11k WiFi driver and involves memory leaks in WMI WOW calls. Detection requires checking kernel logs for ath11k-related errors or examining the kernel version for unpatched releases. Commands like dmesg | grep ath11k or uname -a may help identify affected systems.

Impact Analysis

This vulnerability may cause system instability or resource exhaustion over time due to memory leaks. It primarily affects systems using the ath11k WiFi driver, potentially leading to crashes or degraded performance if exploited repeatedly.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a local denial-of-service issue in the Linux kernel's ath11k Wi-Fi driver, involving memory leaks during error paths in WMI WOW calls. No data exposure or privacy impact is described.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this issue. Monitor kernel security advisories for ath11k-related updates and apply them promptly. If immediate patching is not possible, consider disabling the ath11k driver if WiFi functionality is not critical.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64155. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart