CVE-2026-53104

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: Fix memory leak destroying device

All MT76 rx queues have an associated page_pool even if the queue is not associated to a NAPI (e.g. WED RRO queues with WED enabled). Destroy the page_pool running mt76_dma_cleanup routine during module unload. Moreover returns pages to the page pool if WED is not enabled for WED RRO queues.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22, < 3c363fc4dbdb77a3f02dcf6ba90c1f0a111ef055; >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22, < dcbc13d19bef3326c72f324b10f5a3e5fc4d71de; >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22, < 4b7c92fd8b8700fac387ff43c6f6e0c4e05ec93f; >= 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22, < 6b470f36616e3448d44b0ef4b1de2a3e3a31b5be
LinuxLinux6.8

References

Timeline

Published
Jun 24, 2026
Last modified
Nov 6, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-531055.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txCVE-2026-531065.5In the Linux kernel, the following vulnerability has been resolved: bpf: Do not allow deleting local storage in NMI Currently, local storaCVE-2026-531075.5In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: don't kill URBs in interrupt context Serialization forCVE-2026-531084.7In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race with PMD migration entries The following rCVE-2026-531097.8In the Linux kernel, the following vulnerability has been resolved: powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy powerpc uCVE-2026-53115.3A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325CVE-2026-531107.8In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog return values and kfunc arguments s390xCVE-2026-531115.5In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_pCVE-2026-531127.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irCVE-2026-531135.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leaks in beacon template setup The functions CVE-2026-531145.5In the Linux kernel, the following vulnerability has been resolved: perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handleCVE-2026-531157.8In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: use generic driver_override infrastructure When a driver