Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-98351

wifi: virt_wifi: free skb when disconnected

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.112, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when disconnected When the simulated link is disconnected, virt_wifi_start_xmit() returns NET_XMIT_DROP without freeing the skb. dev_hard_start_xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb. Free the skb before returning the drop status.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From c7cdba31ed8b87526db978976392802d3f93110c · fixed in 38d3a5df85345f158f78b478b265ca906224454e; From c7cdba31ed8b87526db978976392802d3f93110c · fixed in ee053ea35c759135460f03d1c574f4ed08de844a; From c7cdba31ed8b87526db978976392802d3f93110c · fixed in d177eca79e1106834bc423d3969a4a2e3987996a; From c7cdba31ed8b87526db978976392802d3f93110c · fixed in 36727a702cf8e3399e3da60d0856378f6afcfb34; From c7cdba31ed8b87526db978976392802d3f93110c · fixed in 56469996c10a0240653fc00576b4d33bdfb4cc51; From c7cdba31ed8b87526db978976392802d3f93110c · fixed in 4f266738af45675faa0e8afee08c6e780afa8b06; From c7cdba31ed8b87526db978976392802d3f93110c · fixed in 46371442847a725cc0df3697fea2eba1dd54b82b; From c7cdba31ed8b87526db978976392802d3f93110c · fixed in f9edf7cf63b96d2b776fca8d258d3c5256e40c8e

  • Linux Linux

    5.0

  • KernelLinux

    From 5.0.0 · fixed in 5.10.271; From 5.11.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.112; From 6.13.0 · fixed in 6.18.54; From 6.19.0 · fixed in 7.2.8

References 8

git.kernel.org