---
id: CVE-2026-53104
title: 'wifi: mt76: Fix memory leak destroying device'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mt76: Fix memory leak destroying device

  All MT76 rx queues have an associated page_pool even if the queue is not
  associated to a NAPI (e.g. WED RRO queues with W…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 <
    3c363fc4dbdb77a3f02dcf6ba90c1f0a111ef055
  - >-
    Linux >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 <
    dcbc13d19bef3326c72f324b10f5a3e5fc4d71de
  - >-
    Linux >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 <
    4b7c92fd8b8700fac387ff43c6f6e0c4e05ec93f
  - >-
    Linux >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 <
    6b470f36616e3448d44b0ef4b1de2a3e3a31b5be
  - Linux 6.8
published: '2026-06-24'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:42:00.899Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-53104'
references:
  - url: 'https://git.kernel.org/stable/c/3c363fc4dbdb77a3f02dcf6ba90c1f0a111ef055'
  - url: 'https://git.kernel.org/stable/c/dcbc13d19bef3326c72f324b10f5a3e5fc4d71de'
  - url: 'https://git.kernel.org/stable/c/4b7c92fd8b8700fac387ff43c6f6e0c4e05ec93f'
  - url: 'https://git.kernel.org/stable/c/6b470f36616e3448d44b0ef4b1de2a3e3a31b5be'
tags:
  - cve.org
epss: 0.0016
epssPercentile: 0.04791
ingestedAt: '2026-10-21T12:48:53.623Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix memory leak destroying device

All MT76 rx queues have an associated page_pool even if the queue is not
associated to a NAPI (e.g. WED RRO queues with WED enabled). Destroy the
page_pool running mt76_dma_cleanup routine during module unload.
Moreover returns pages to the page pool if WED is not enabled for WED RRO
queues.

## Affected

- `Linux >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 < 3c363fc4dbdb77a3f02dcf6ba90c1f0a111ef055`
- `Linux >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 < dcbc13d19bef3326c72f324b10f5a3e5fc4d71de`
- `Linux >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 < 4b7c92fd8b8700fac387ff43c6f6e0c4e05ec93f`
- `Linux >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 < 6b470f36616e3448d44b0ef4b1de2a3e3a31b5be`
- `Linux 6.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.