CVE-2026-98426
Received
Received - Intake
IRQ Leak in mwifiex WiFi Driver
Vulnerability report for CVE-2026-98426, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-14
Last updated on: 2026-10-14
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
mwifiex_pcie_request_irq() registers each MSI-X vector with a per-index
dev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop
"for (j = 0; j < i; j++)" frees msix_entries[j].vector but passes the
failed index's &card->msix_ctx[i] as the dev_id. free_irq() matches on
(irq, dev_id), so it fails to find the action registered with
&card->msix_ctx[j]: the already-requested IRQ j is not freed (leaked) and
free_irq() warns about freeing a non-existent IRQ. Use &card->msix_ctx[j].
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 99074fc1e67b374b5c72406a23ac01fed806d634 |
| Linux | Linux | 99074fc1e67b374b5c72406a23ac01fed806d634 |
| Linux | Linux | 99074fc1e67b374b5c72406a23ac01fed806d634 |
| Linux | Linux | 99074fc1e67b374b5c72406a23ac01fed806d634 |
| Linux | Linux | 99074fc1e67b374b5c72406a23ac01fed806d634 |
| Linux | Linux | 99074fc1e67b374b5c72406a23ac01fed806d634 |
| Linux | Linux | 99074fc1e67b374b5c72406a23ac01fed806d634 |
| Linux | Linux | 99074fc1e67b374b5c72406a23ac01fed806d634 |
| Linux | Linux | 4.6 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
