SB2026100718 - Memory leak in Linux kernel wireless virtual driver
Published: October 7, 2026
Security Bulletin ID
SB2026100718
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Partial DoS
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Memory leak (CVE-ID: CVE-2026-98351)
CWE-ID: CWE-401 - Missing release of memory after effective lifetime
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause kernel memory leaks.
The vulnerability exists due to failure to free socket buffers in virt_wifi_start_xmit() when transmitting packets while the simulated link is disconnected. A local user can send packets through the disconnected simulated link to cause kernel memory leaks.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/36727a702cf8e3399e3da60d0856378f6afcfb34
- https://git.kernel.org/stable/c/38d3a5df85345f158f78b478b265ca906224454e
- https://git.kernel.org/stable/c/46371442847a725cc0df3697fea2eba1dd54b82b
- https://git.kernel.org/stable/c/4f266738af45675faa0e8afee08c6e780afa8b06
- https://git.kernel.org/stable/c/56469996c10a0240653fc00576b4d33bdfb4cc51
- https://git.kernel.org/stable/c/d177eca79e1106834bc423d3969a4a2e3987996a
- https://git.kernel.org/stable/c/ee053ea35c759135460f03d1c574f4ed08de844a
- https://git.kernel.org/stable/c/f9edf7cf63b96d2b776fca8d258d3c5256e40c8e