---
id: CVE-2026-90378
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mt76: mt792x: Fix memory leak in SDIO TX path

  When tx_prepare_skb() returns an error in the SDIO TX path, the
  skb is not freed, leading to a memory leak
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: mt76: mt792x: Fix memory leak in SDIO TX path

  When tx_prepare_skb() returns an error in the SDIO TX path, the
  skb is not freed, leading to a memory leak. This ca…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b747fa343817fd322b4463dda99d28fc51e19c52 <
    b64d196280aff8494ba6fb387e37b18479c99b83
  - >-
    Linux >= b747fa343817fd322b4463dda99d28fc51e19c52 <
    9ef1351209d42b7d96604f2a13d7ea8215a24e07
  - >-
    Linux >= b747fa343817fd322b4463dda99d28fc51e19c52 <
    c2c7f16f2c62f79f7c381e500afa7123580742a5
  - >-
    Linux >= b747fa343817fd322b4463dda99d28fc51e19c52 <
    6a8000c76dc34490a2bb321ad1a5f882a2ccab7c
  - >-
    Linux >= b747fa343817fd322b4463dda99d28fc51e19c52 <
    ddf6a17d8e3d0dbb841c13c10d7c1340a138a80d
  - >-
    Linux >= b747fa343817fd322b4463dda99d28fc51e19c52 <
    6a342db7a6502bc6781579145e05d4d4731786ab
  - >-
    Linux >= b747fa343817fd322b4463dda99d28fc51e19c52 <
    808f2767d4217a5b96f674288573b9b89d432eed
  - Linux 5.12
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:37.040'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-90378'
references:
  - url: 'https://git.kernel.org/stable/c/6a342db7a6502bc6781579145e05d4d4731786ab'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6a8000c76dc34490a2bb321ad1a5f882a2ccab7c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/808f2767d4217a5b96f674288573b9b89d432eed'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9ef1351209d42b7d96604f2a13d7ea8215a24e07'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b64d196280aff8494ba6fb387e37b18479c99b83'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c2c7f16f2c62f79f7c381e500afa7123580742a5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ddf6a17d8e3d0dbb841c13c10d7c1340a138a80d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.807Z'
epss: 0.00215
epssPercentile: 0.10508
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt792x: Fix memory leak in SDIO TX path

When tx_prepare_skb() returns an error in the SDIO TX path, the
skb is not freed, leading to a memory leak. This can occur when
zero-length frames (such as WNM NULL frames) are dropped to prevent
potential hardware TX hangs.

Fix this by properly releasing the skb with ieee80211_tx_status_ext()
when tx_prepare_skb() fails.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.