Veille CVE

‹ Retour à la liste

CVE-2026-90361

– Non évaluée

Publiée le 17/09/2026 à 19:17 · Modifiée le 19/10/2026 à 11:19 · Reçue · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix leak in ath11k_service_ready_ext_event() Currently, during ath11k_service_ready_ext_event() processing, svc_rdy_ext.mac_phy_caps can be allocated during TLV parsing. This is a temporary allocation that is freed on the success path, but not on the error path. If parsing succeeds far enough to allocate mac_phy_caps and then fails on a later TLV, the allocation leaks. So free the allocation on the error path. Compile tested only.

Traduire en français

Produits concernés

Références

Ailleurs