SB2026081591 - Memory leak in Linux kernel ath12k wifi7 driver

Description

This security bulletin contains information about 1 vulnerability.

1) Memory leak (CVE-ID: CVE-2026-74368)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to a memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() when processing frames with an invalid NWIFI header length during TKIP MIC verification. A remote attacker can send a specially crafted frame to cause a denial of service.

The issue occurs on an error path where the MSDU is no longer referenced by the defragmentation path and is never freed.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/5187a92099778501f21af76ed6c8415d128e7298
• https://git.kernel.org/stable/c/98d4f92ab6a1af2ea2ab590d7e2801b203110981