CVE-2026-98426

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path

mwifiex pcie request irq() registers each MSI-X vector with a per-index dev id (&card->msix ctx[i]). On a request irq() failure the cleanup loop "for (j = 0; j < i; j++)" frees msix entries[j].vector but passes the failed index's &card->msix ctx[i] as the dev id. free irq() matches on (irq, dev id), so it fails to find the action registered with &card->msix ctx[j]: the already-requested IRQ j is not freed (leaked) and free irq() warns about freeing a non-existent IRQ. Use &card->msix ctx[j].