CVE-2026-74326
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix resource leak in probe error path When pcim_iomap_region() or devm_kmemdup() fail, the code returns directly without cleaning up previously allocated resources: - mt76_device allocated by mt76_alloc_device() - pci irq vectors allocated by pci_alloc_irq_vectors() Fix this by jumping to the existing error cleanup path instead of returning directly.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74326
EUVD
EUVD-2026-59473

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mt76 mt7921 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a resource leak in the Linux kernel's mt76 Wi-Fi driver, specifically affecting the mt7921 device. When certain functions like pcim_iomap_region() or devm_kmemdup() fail during device probe, the code exits without properly releasing allocated resources such as the mt76_device and PCI IRQ vectors.

Detection Guidance

This vulnerability is specific to the Linux kernel's mt76 wireless driver, particularly the mt7921 chipset. Detection requires checking if your system uses the affected driver version. You can run: lsmod | grep mt76 to see if the driver is loaded. If loaded, check the kernel version with uname -r to confirm if it matches vulnerable versions. No direct commands detect the vulnerability itself, as it involves a resource leak during driver initialization.

Impact Analysis

This vulnerability could lead to system resource exhaustion, causing instability or crashes. If the driver fails to clean up memory or IRQ allocations during initialization, it may result in memory leaks or interrupt handling issues, potentially affecting system performance and reliability.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. If updating is not immediately possible, consider disabling the mt76 wireless driver by blacklisting it (echo 'blacklist mt76' > /etc/modprobe.d/blacklist-mt76.conf) and using alternative drivers if available. Ensure your system's firmware and drivers are up to date.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74326. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart