CVE-2026-90361
kernel: wifi: ath11k: fix leak in ath11k_service_ready_ext_event()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 1, 2026
Description
A flaw was found in the Linux kernel's ath11k Wi-Fi driver. During the ath11k_service_ready_ext_event() processing, a memory allocation for svc_rdy_ext.mac_phy_caps is not released if an error occurs during TLV (Type-Length-Value) parsing. This can lead to a memory leak, potentially causing resource exhaustion and a Denial of Service (DoS) on the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime