CVE-2026-64155 in Linux
Summary
by MITRE • 07/19/2026
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix error path leaks in some WMI WOW calls
Fix two instances where we used to directly return the result of ath11k_wmi_cmd_send(...). Because we did not check the return value, we also did not free the skb in the error path.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 07/19/2026
The vulnerability identified in the linux kernel relates to improper error handling within the ath11k wireless driver's WMI WoW (Wake on Wireless) functionality. This issue specifically affects the ath11k wireless driver which is responsible for managing Qualcomm's 802.11ac Wi-Fi chipsets. The flaw manifests in two distinct code paths where the driver fails to properly validate return values from the ath11k_wmi_cmd_send function call, leading to memory leak conditions in error scenarios.
The technical implementation of this vulnerability stems from a lack of proper resource management in the wireless driver's error handling routines. When the ath11k_wmi_cmd_send function encounters an error condition, it returns an error code that should trigger cleanup operations for allocated resources. However, the current implementation directly returns the result without first checking if the operation succeeded, which prevents the necessary skb (socket buffer) memory cleanup from occurring. This represents a classic resource leak pattern that can be categorized under CWE-404 as improper resource release or unbalanced allocation and deallocation.
The operational impact of this vulnerability extends beyond simple memory consumption issues, as it creates potential stability risks for wireless networking functionality. In sustained use scenarios where WMI WoW operations are frequently attempted, the accumulation of leaked socket buffers could eventually lead to system performance degradation or even complete wireless subsystem failure. The vulnerability affects systems running linux kernel versions that include the ath11k driver and are utilizing WMI WoW features for power management or network monitoring purposes.
From an attack perspective, this vulnerability aligns with ATT&CK technique T1059 by potentially enabling resource exhaustion attacks against wireless subsystems, though it does not directly provide privilege escalation capabilities. The memory leak occurs in kernel space within the wireless driver module, making it a critical concern for embedded systems and devices where wireless connectivity is essential for operation. The flaw particularly impacts devices that rely on power management features or require persistent wireless monitoring capabilities.
The mitigation strategy involves implementing proper error handling checks before returning values from WMI command send operations. Specifically, the fix requires modifying code paths to validate return values from ath11k_wmi_cmd_send and ensure that associated skb memory is properly freed in all execution paths, including error conditions. This approach follows standard kernel security practices for resource management and aligns with best practices outlined in the linux kernel documentation for proper error handling in device drivers. The fix ensures that all allocated resources are consistently released regardless of whether operations complete successfully or encounter errors during wireless management operations.