CVE Database›Document archive›CVE-2026-98426

CVE-2026-98426

kernel: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · October 14, 2026

Updated · November 1, 2026

Description

A flaw was found in the Linux kernel's Marvell WiFi-Ex (mwifiex) driver. When an error occurs during interrupt registration in the PCIe interface, the cleanup path references an incorrect context index when attempting to release Message Signaled Interrupts (MSI-X). A local user able to trigger device initialization failures could cause an interrupt request (IRQ) leak and kernel warnings, leading to resource exhaustion and a Denial of Service (DoS).

Statement

Moderate severity is assigned to this flaw because exploitation requires local access, the physical presence of Marvell PCIe wireless hardware, and specific failure conditions during interrupt allocation. Standard Red Hat Enterprise Linux environments do not typically deploy Marvell Wi-Fi adapters, and the driver is not loaded unless matching hardware is detected. The vulnerability only manifests during error handling in device initialization, restricting the overall blast radius to localized interrupt resource leaks and kernel warnings rather than arbitrary code execution.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime