In the Linux kernel, the following vulnerability has been resolved:

wifi: virt wifi: free skb when disconnected

When the simulated link is disconnected, virt wifi start xmit() returns NET XMIT DROP without freeing the skb. dev hard start xmit() treats this return value as consumed, so every packet sent while disconnected leaks its skb.

Free the skb before returning the drop status.