CVE-2026-98426
kernel: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 14, 2026
Updated · November 1, 2026
Description
A flaw was found in the Linux kernel's Marvell WiFi-Ex (mwifiex) driver. When an error occurs during interrupt registration in the PCIe interface, the cleanup path references an incorrect context index when attempting to release Message Signaled Interrupts (MSI-X). A local user able to trigger device initialization failures could cause an interrupt request (IRQ) leak and kernel warnings, leading to resource exhaustion and a Denial of Service (DoS).
Statement
Moderate severity is assigned to this flaw because exploitation requires local access, the physical presence of Marvell PCIe wireless hardware, and specific failure conditions during interrupt allocation. Standard Red Hat Enterprise Linux environments do not typically deploy Marvell Wi-Fi adapters, and the driver is not loaded unless matching hardware is detected. The vulnerability only manifests during error handling in device initialization, restricting the overall blast radius to localized interrupt resource leaks and kernel warnings rather than arbitrary code execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime