CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic()
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix memory leak in ath12kwifi7dprxhverifytkipmic()
In ath12kwifi7dprxhverifytkipmic(), the call to ath12kdprxchecknwifihdrlenvalid() may return false when the NWIFI header length is invalid, causing the function to abort early with -EINVAL.
When this happens, the error propagates to ath12kwifi7dprxhdefrag(), which clears firstfrag by setting it to NULL. As a result, the corresponding MSDU is no longer referenced by the defragmentation path and is never freed.
This leads to a memory leak for the affected MSDU on this error path. Proper cleanup is required to ensure the MSDU is released when header validation fails during TKIP MIC verification.
Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c5-00302-QCAHMTSWPLV1.0V2.0SILICONZ-1.115823.3
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74368?
CVE-2026-74368 has a risk score of 15, indicating a high level of severity.
How do I fix CVE-2026-74368?
To fix CVE-2026-74368, update the Linux kernel to the latest version that includes the patch for this vulnerability.
What is the impact of CVE-2026-74368?
CVE-2026-74368 can lead to a memory leak in the ath12k driver's TKIP MIC verification process.
What versions of the Linux kernel are affected by CVE-2026-74368?
CVE-2026-74368 affects versions of the Linux kernel prior to the patch release addressing this vulnerability.
Is CVE-2026-74368 being actively exploited?
As of the latest updates, there is no public evidence indicating that CVE-2026-74368 is being actively exploited.