CVE-2026-64155

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly return the result of ath11k_wmi_cmd_send(...). Because we did not check the return value, we also did not free the skb in the error path.

Rincian

Terbit di NVD

19 Juli 2026

Terakhir diubah

17 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/008955b1348452de25bc19d6e0f0f673d4cb9a3c patch
• https://git.kernel.org/stable/c/3d675896ea03aca631852a2a7e91e6cb8f664967 patch
• https://git.kernel.org/stable/c/55dda532bbc261aef495e403c8900c5e2ab5fa34 patch
• https://git.kernel.org/stable/c/acde4692afcdaea6de3e2996ddfaeaa7ae6b0130 patch
• https://git.kernel.org/stable/c/cd43d587dd333517c806cd24696e6e1a26b9951e patch
• https://git.kernel.org/stable/c/d618d322b95c80d5ad7091f35a7193e4050dcc27 patch
• https://git.kernel.org/stable/c/d6c7b8d0dc22c0a8743435db8f42d98524b70df3 patch