CVE-2026-74368
kernel: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's ath12k Wi-Fi driver. When processing Wi-Fi frames, an invalid NWIFI (Network Wi-Fi) header length during TKIP (Temporal Key Integrity Protocol) MIC (Message Integrity Code) verification can cause an early exit from a handling function. This prevents the associated Mac Service Data Unit (MSDU) from being properly released, leading to a memory leak. Over time, this memory leak could potentially lead to a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime