CVE-2026-80941wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() The skb passed to the rtw_hci_tx_write() is expected to be freed when the function fails, but the error path in rtw_txq_push_skb() does not free the skb before returning. This can lead to a memory leak in rtw_txq_push() where a dequeued skb is passed to rtw_txq_push_skb().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 14, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from aaab5d0e673749f82ff34e5f15ea8a689789a9ce before e8fd57157ee7a9e2986a9218198a5c1b02f2310b; from aaab5d0e673749f82ff34e5f15ea8a689789a9ce before 924e75a420a3000e9f189aed26f67556a62f2d57; from aaab5d0e673749f82ff34e5f15ea8a689789a9ce before 68676ce3313b74326fbcf21c673728db4c19d3cf; from aaab5d0e673749f82ff34e5f15ea8a689789a9ce before c86199357a93b9182854cf805d7780a213fda937; from aaab5d0e673749f82ff34e5f15ea8a689789a9ce before 6e95852f904edbabf411793093fcfd6f6d49ef27; from aaab5d0e673749f82ff34e5f15ea8a689789a9ce before 7364713f0931ee45fdf0bea27103b40ccc94979a; from aaab5d0e673749f82ff34e5f15ea8a689789a9ce before 51d8b35574721cf3fe744f46ebd9629916063fee; from aaab5d0e673749f82ff34e5f15ea8a689789a9ce before 9f2948010764d708bda27369d09ce6f194abe8e3 | CNA record |
References
- https://git.kernel.org/stable/c/e8fd57157ee7a9e2986a9218198a5c1b02f2310b
- https://git.kernel.org/stable/c/924e75a420a3000e9f189aed26f67556a62f2d57
- https://git.kernel.org/stable/c/68676ce3313b74326fbcf21c673728db4c19d3cf
- https://git.kernel.org/stable/c/c86199357a93b9182854cf805d7780a213fda937
- https://git.kernel.org/stable/c/6e95852f904edbabf411793093fcfd6f6d49ef27
- https://git.kernel.org/stable/c/7364713f0931ee45fdf0bea27103b40ccc94979a
- https://git.kernel.org/stable/c/51d8b35574721cf3fe744f46ebd9629916063fee
- https://git.kernel.org/stable/c/9f2948010764d708bda27369d09ce6f194abe8e3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.