CVE-2026-53102
kernel: wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · July 22, 2026
Description
A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability, a memory leak, occurs when the mt76_connac_mcu_alloc_sta_req() function allocates a socket buffer (skb) that is not properly freed if subsequent operations, such as mt76_connac_mcu_sta_wed_update() or mt76_connac_mcu_sta_key_tlv(), fail. This can lead to a gradual consumption of system memory, potentially impacting system stability and performance over time.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime