CVE-2026-80941

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()

The skb passed to the rtw_hci_tx_write() is expected to be freed when the function fails, but the error path in rtw_txq_push_skb() does not free the skb before returning. This can lead to a memory leak in rtw_txq_push() where a dequeued skb is passed to rtw_txq_push_skb().

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= aaab5d0e673749f82ff34e5f15ea8a689789a9ce, < e8fd57157ee7a9e2986a9218198a5c1b02f2310b; >= aaab5d0e673749f82ff34e5f15ea8a689789a9ce, < 924e75a420a3000e9f189aed26f67556a62f2d57; >= aaab5d0e673749f82ff34e5f15ea8a689789a9ce, < 68676ce3313b74326fbcf21c673728db4c19d3cf; >= aaab5d0e673749f82ff34e5f15ea8a689789a9ce, < c86199357a93b9182854cf805d7780a213fda937; >= aaab5d0e673749f82ff34e5f15ea8a689789a9ce, < 6e95852f904edbabf411793093fcfd6f6d49ef27; >= aaab5d0e673749f82ff34e5f15ea8a689789a9ce, < 7364713f0931ee45fdf0bea27103b40ccc94979a; >= aaab5d0e673749f82ff34e5f15ea8a689789a9ce, < 51d8b35574721cf3fe744f46ebd9629916063fee; >= aaab5d0e673749f82ff34e5f15ea8a689789a9ce, < 9f2948010764d708bda27369d09ce6f194abe8e3
LinuxLinux5.7

References

Timeline

Published
Sep 11, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80942In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vCVE-2026-809437.6In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92du_tCVE-2026-809447.8In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex syncCVE-2026-809459.1In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a haCVE-2026-80946In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-ioCVE-2026-809477.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop rtl8xxxu armCVE-2026-80948In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() In iwl_CVE-2026-80949In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() The memorCVE-2026-80958.1The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and includingCVE-2026-809507.8In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid before accessing it TheCVE-2026-80951In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: bound IBI payload to the requested max_payload_len sCVE-2026-809527.8In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3c_maste
CVE-2026-80941: Unscored | Vulnix