SB2026100766 - Memory leak in Linux kernel ath ath11k driver

Description

This security bulletin contains information about 1 vulnerability.

1) Memory leak (CVE-ID: CVE-2026-98307)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a memory leak.

The vulnerability exists due to missing release of station statistics allocations in ath11k_mac_peer_cleanup_all() when recovering from a firmware crash. A local user can encounter firmware-crash recovery with allocated station statistics to cause a memory leak.

The unreleased allocations are arsta->rx_stats and arsta->tx_stats. Recovery calls ieee80211_restart_hw(), which assumes that driver resources have already been cleaned up.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/57bc3cd46458eafa1c38e3044a61b7399cde7642
• https://git.kernel.org/stable/c/820b8cff81c796ba20573e04722ab62500713f97
• https://git.kernel.org/stable/c/be1d5e95ec499ed5ee9704aa27dd1407ccf0d0ac
• https://git.kernel.org/stable/c/c4108dce0838ec7d38d782f76f9c007cfe2fff45