CVE-2026-74323
Received Received - Intake

Memory Leak in Linux Kernel mt76 WiFi Driver

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() If link_conf or link_sta lookup fails in mt7996_tx_prepare_skb routine, mt7996 driver leaks an already allocated tx token. Fix the issue releasing the token in case of error.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74323
EUVD
EUVD-2026-59470

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel mt7996 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel's mt76 driver for the mt7996 wireless chipset. It involves a token leak in the mt7996_tx_prepare_skb function. When certain lookups fail, the driver fails to release an allocated transmission token, causing a resource leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's mt76 driver for the mt7996 Wi-Fi chipset. Detection requires checking if your system uses the affected driver version. Run: lsmod | grep mt7996 to see if the module is loaded. If loaded, check the driver version with modinfo mt7996 | grep version. Compare the version against patched releases from your Linux distribution.

Impact Analysis

The token leak could lead to resource exhaustion on affected systems, potentially causing performance degradation or crashes. It primarily affects systems using the mt7996 wireless chipset in the Linux kernel.

Mitigation Strategies

Update your Linux kernel to a version containing the fix for CVE-2026-74323. If your distribution has not yet released a patched kernel, consider temporarily disabling the mt7996 driver by blacklisting it (echo 'blacklist mt7996' | sudo tee /etc/modprobe.d/blacklist-mt7996.conf) and rebooting. Monitor your distribution's security advisories for kernel updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74323. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart