CVE-2026-53102: wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: Fix memory leak after mt76connacmcuallocstareq()
mt76connacmcuallocstareq() allocates an skb which is expected to be freed eventually by mt76mcuskbsendmsg(). However, currently if an intermediate function fails before sending, the allocated skb is leaked.
Specifically, mt76connacmcustawedupdate() and mt76connacmcustakeytlv() may fail, leading to an immediate memory leak in the error path.
Fix this by explicitly freeing the skb in these error paths. Commit 7c0f63fe37a5 ("wifi: mt76: mt7996: fix memory leak on mt7996mcustakeytlv error") made a similar change.
Compile tested only. Issue found using a prototype static analysis tool and code review.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53102?
The severity of CVE-2026-53102 is rated as risk 12.
How do I fix CVE-2026-53102?
To fix CVE-2026-53102, update the Linux kernel to the latest version that includes the fix for the memory leak.
What does CVE-2026-53102 affect?
CVE-2026-53102 affects the Linux kernel, specifically the mt76 driver used for wireless connectivity.
What type of vulnerability is CVE-2026-53102?
CVE-2026-53102 is a memory leak vulnerability in the Linux kernel related to the allocation of socket buffers.
When was CVE-2026-53102 published?
CVE-2026-53102 was published on June 24, 2026.