CVE-2026-63821

A flaw was found in the Linux kernel's rtw88 Wi-Fi driver for USB. When the rtw_usb_write_port() function fails to submit a USB Request Block (URB), such as during a device disconnect or out of memory conditions, the system does not properly free allocated memory. This oversight leads to memory leaks of socket buffers and transaction control blocks. Over time, this memory exhaustion could allow a local attacker to cause a denial of service by making the system unstable or unresponsive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.