CVE-2025-68765mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() In mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated. If the subsequent call to mt76_connac_mcu_alloc_wtbl_req() fails, the function returns an error without freeing sskb, leading to a memory leak. Fix this by calling dev_kfree_skb() on sskb in the error handling path to ensure it is properly released.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 99c457d902cf90bdc0df5d57e6156ec108711068 before d6c91fc732698642f70c688324c98551b97b412c; from 99c457d902cf90bdc0df5d57e6156ec108711068 before 594ff8bb69e239678a8baa461827ce4bb90eff8f; 99c457d902cf90bdc0df5d57e6156ec108711068 builds before 1c3c234af9407256ed670c8752923a672eea4225; from 99c457d902cf90bdc0df5d57e6156ec108711068 before 278bfed4529a0c9c9119f5a52ddafe69db61a75c; from 99c457d902cf90bdc0df5d57e6156ec108711068 before fb905e69941b44e03fe1a24e95328d45442b6d6d; 99c457d902cf90bdc0df5d57e6156ec108711068 builds before 4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49; 99c457d902cf90bdc0df5d57e6156ec108711068 builds before 53d1548612670aa8b5d89745116cc33d9d172863 | CNA record |
References
- https://git.kernel.org/stable/c/d6c91fc732698642f70c688324c98551b97b412c
- https://git.kernel.org/stable/c/594ff8bb69e239678a8baa461827ce4bb90eff8f
- https://git.kernel.org/stable/c/1c3c234af9407256ed670c8752923a672eea4225
- https://git.kernel.org/stable/c/278bfed4529a0c9c9119f5a52ddafe69db61a75c
- https://git.kernel.org/stable/c/fb905e69941b44e03fe1a24e95328d45442b6d6d
- https://git.kernel.org/stable/c/4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49
- https://git.kernel.org/stable/c/53d1548612670aa8b5d89745116cc33d9d172863
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.