---
id: CVE-2025-68765
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()

  In mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()

  In mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated. If the
  subsequent call to mt76_connac_mcu_alloc_wtbl…
severity: none
published: '2026-01-05'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:10:00.297'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68765'
references:
  - url: 'https://git.kernel.org/stable/c/1c3c234af9407256ed670c8752923a672eea4225'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/278bfed4529a0c9c9119f5a52ddafe69db61a75c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/53d1548612670aa8b5d89745116cc33d9d172863'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/594ff8bb69e239678a8baa461827ce4bb90eff8f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d6c91fc732698642f70c688324c98551b97b412c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fb905e69941b44e03fe1a24e95328d45442b6d6d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00193
epssPercentile: 0.0839
ingestedAt: '2026-10-14T19:49:57.553Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()

In mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated. If the
subsequent call to mt76_connac_mcu_alloc_wtbl_req() fails, the function
returns an error without freeing sskb, leading to a memory leak.

Fix this by calling dev_kfree_skb() on sskb in the error handling path
to ensure it is properly released.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.