CVE-2026-74368

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the ath12k wifi driver. In the ath12k wifi7 dp rx h verify tkip mic() function, a call to ath12k dp rx check nwifi hdr len valid() may return false if the NWIFI header length is invalid, causing the function to abort with an error. This error propagates to ath12k wifi7 dp rx h defrag(), which sets the first frag variable to NULL. Consequently, the corresponding MSDU (MAC Service Data Unit) is no longer referenced by the defragmentation path and is not freed, resulting in a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.