CVE-2026-74323
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
In the Linux kernel, the mt7996 driver's mt7996_tx_prepare_skb() function may leak transmission tokens if the link_conf or link_sta lookup fails. The token is allocated before the check and is not released on error. The fix releases the token in case of error.
Risk Assessment
Token leak can lead to resource exhaustion, potentially causing inability to transmit data or driver malfunction. This may affect system stability and performance.
Recommendation
It is recommended to update the Linux kernel to a version containing the fix that releases the token on error in mt7996_tx_prepare_skb().
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() If link_conf or link_sta lookup fails in mt7996_tx_prepare_skb routine, mt7996 driver leaks an already allocated tx token. Fix the issue releasing the token in case of error.