CVE-2026-80941

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()

The skb passed to the rtw_hci_tx_write() is expected to be freed when the function fails, but the error path in rtw_txq_push_skb() does not free the skb before returning. This can lead to a memory leak in rtw_txq_push() where a dequeued skb is passed to rtw_txq_push_skb().

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxaaab5d0e673749f82ff34e5f15ea8a689789a9ce < e8fd57157ee7a9e2986a9218198a5c1b02f2310baffected
LinuxLinuxaaab5d0e673749f82ff34e5f15ea8a689789a9ce < 924e75a420a3000e9f189aed26f67556a62f2d57affected
LinuxLinuxaaab5d0e673749f82ff34e5f15ea8a689789a9ce < 68676ce3313b74326fbcf21c673728db4c19d3cfaffected
LinuxLinuxaaab5d0e673749f82ff34e5f15ea8a689789a9ce < c86199357a93b9182854cf805d7780a213fda937affected
LinuxLinuxaaab5d0e673749f82ff34e5f15ea8a689789a9ce < 6e95852f904edbabf411793093fcfd6f6d49ef27affected
LinuxLinuxaaab5d0e673749f82ff34e5f15ea8a689789a9ce < 7364713f0931ee45fdf0bea27103b40ccc94979aaffected
LinuxLinuxaaab5d0e673749f82ff34e5f15ea8a689789a9ce < 51d8b35574721cf3fe744f46ebd9629916063feeaffected
LinuxLinuxaaab5d0e673749f82ff34e5f15ea8a689789a9ce < 9f2948010764d708bda27369d09ce6f194abe8e3affected
LinuxLinux5.7affected
LinuxLinux0 < 5.7unaffected
LinuxLinux5.10.270 <= 5.10.*unaffected
LinuxLinux5.15.221 <= 5.15.*unaffected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.109 <= 6.12.*unaffected
LinuxLinux6.18.50 <= 6.18.*unaffected
LinuxLinux7.2.4 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References