CVE-2026-74326

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74326", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.884Z", "datePublished": "2026-08-15T05:58:20.933Z", "dateUpdated": "2026-08-17T05:17:16.898Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:17:16.898Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7921: fix resource leak in probe error path\n\nWhen pcim_iomap_region() or devm_kmemdup() fail, the code returns\ndirectly without cleaning up previously allocated resources:\n - mt76_device allocated by mt76_alloc_device()\n - pci irq vectors allocated by pci_alloc_irq_vectors()\nFix this by jumping to the existing error cleanup path instead of\nreturning directly."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/mediatek/mt76/mt7921/pci.c"], "versions": [{"version": "ee5bb35d2b83fadc6920aa2478326fb50ea653a9", "lessThan": "79a307b2730e4b4e060cf3e19a6c21b87116ee78", "status": "affected", "versionType": "git"}, {"version": "ee5bb35d2b83fadc6920aa2478326fb50ea653a9", "lessThan": "346dac35b1384af9338b34b6835e82e634ea4d2c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/mediatek/mt76/mt7921/pci.c"], "versions": [{"version": "7.1", "status": "affected"}, {"version": "0", "lessThan": "7.1", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.1", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.1", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/79a307b2730e4b4e060cf3e19a6c21b87116ee78"}, {"url": "https://git.kernel.org/stable/c/346dac35b1384af9338b34b6835e82e634ea4d2c"}], "title": "wifi: mt76: mt7921: fix resource leak in probe error path", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/wireless/mediatek/mt76/mt7921/pci.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "79a307b2730e4b4e060cf3e19a6c21b87116ee78", "status": "affected", "version": "ee5bb35d2b83fadc6920aa2478326fb50ea653a9", "versionType": "git"}, {"lessThan": "346dac35b1384af9338b34b6835e82e634ea4d2c", "status": "affected", "version": "ee5bb35d2b83fadc6920aa2478326fb50ea653a9", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/wireless/mediatek/mt76/mt7921/pci.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "7.1"}, {"lessThan": "7.1", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7921: fix resource leak in probe error path\n\nWhen pcim_iomap_region() or devm_kmemdup() fail, the code returns\ndirectly without cleaning up previously allocated resources:\n - mt76_device allocated by mt76_alloc_device()\n - pci irq vectors allocated by pci_alloc_irq_vectors()\nFix this by jumping to the existing error cleanup path instead of\nreturning directly."}], "id": "CVE-2026-74326", "lastModified": "2026-08-17T06:19:27.033", "metrics": {}, "published": "2026-08-15T06:22:33.260", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/346dac35b1384af9338b34b6835e82e634ea4d2c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/79a307b2730e4b4e060cf3e19a6c21b87116ee78"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: wifi: mt76: mt7921: fix resource leak in probe error path", "id": "2516926", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516926"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nwifi: mt76: mt7921: fix resource leak in probe error path\nWhen pcim_iomap_region() or devm_kmemdup() fail, the code returns\ndirectly without cleaning up previously allocated resources:\n- mt76_device allocated by mt76_alloc_device()\n- pci irq vectors allocated by pci_alloc_irq_vectors()\nFix this by jumping to the existing error cleanup path instead of\nreturning directly.", "A flaw was found in the Linux kernel's mt76 wireless driver. This flaw occurs when certain memory allocation or I/O mapping functions fail during the probe error path, leading to a failure to deallocate previously reserved resources. This can result in a resource leak, potentially leading to system instability or a denial of service (DoS) condition."], "name": "CVE-2026-74326", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-74326\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74326\nhttps://lore.kernel.org/linux-cve-announce/2026081554-CVE-2026-74326-72b3@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ee5bb35d2b83fadc6920aa2478326fb50ea653a9,79a307b2730e4b4e060cf3e19a6c21b87116ee78)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ee5bb35d2b83fadc6920aa2478326fb50ea653a9,346dac35b1384af9338b34b6835e82e634ea4d2c)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,7.1)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T13:15:03.217660+00:00", "updated": "2026-08-22T02:45:03.713833+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}