CVE-2026-90378 wifi: mt76: mt792x: Fix memory leak in SDIO TX path
A memory leak in the Linux kernel mt792x WiFi driver allows attackers to cause denial of service by sending zero-length frames.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-90378?
CVE-2026-90378 is a memory corruption vulnerability in Linux, published on 17 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt792x: Fix memory leak in SDIO TX path
When tx_prepare_skb() returns an error in the SDIO TX path, the skb is not freed, leading to a memory leak. This can occur when zero-length frames (such as WNM NULL frames) are dropped to prevent potential hardware TX hangs.
Fix this by properly releasing the skb with ieee80211_tx_status_ext() when tx_prepare_skb() fails.
Which versions are affected by CVE-2026-90378?
How do I fix CVE-2026-90378?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-90378 being exploited?
There is no known exploitation of CVE-2026-90378 in the wild and no public exploit code.
Sources
Also known as AZL-102897, BELL-CVE-2026-90378, DEBIAN-CVE-2026-90378, GHSA-v25j-v9cr-gcjm, UBUNTU-CVE-2026-90378.