CVE-2026-63821

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the rtw88 USB driver when the rtw usb write port() function fails to submit a USB Request Block (URB), which can happen during device disconnects or memory pressure conditions (ENOMEM). Because the driver ignores the return value of rtw usb write port() within the rtw usb write data() and rtw usb tx agg skb() functions, the completion callback required to free resources is never executed. This leads to memory leaks of the allocated socket buffers (skb) in rtw usb write data(), as well as the transaction control block (txcb) and all aggregated socket buffers in rtw usb tx agg skb().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.