CVE-2026-74368
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() In ath12k_wifi7_dp_rx_h_verify_tkip_mic(), the call to ath12k_dp_rx_check_nwifi_hdr_len_valid() may return false when the NWIFI header length is invalid, causing the function to abort early with -EINVAL. When this happens, the error propagates to ath12k_wifi7_dp_rx_h_defrag(), which clears first_frag by setting it to NULL. As a result, the corresponding MSDU is no longer referenced by the defragmentation path and is never freed. This leads to a memory leak for the affected MSDU on this error path. Proper cleanup is required to ensure the MSDU is released when header validation fails during TKIP MIC verification. Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
Affected versions
Linux kernel versions
6.6.88,
6.12.24,
6.13.12,
6.14.3,
6.15
and later are affected. Fixed in
7.1.5,
7.2-rc1
and their respective stable series.
References
2 totalFrequently asked questions
-
What is CVE-2026-74368?
CVE-2026-74368 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.6.88 onward and has been patched in 7.1.5 and 7.2-rc1. CVE-2026-74368 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-74368?
Yes. CVE-2026-74368 has been patched. Fixed versions include 7.1.5 and 7.2-rc1. If you are running Linux kernel 6.6.88 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-74368 actively exploited?
No. CVE-2026-74368 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.