0.0
NA
CVE-2026-80941
wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()
Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() The skb passed to the rtw_hci_tx_write() is expected to be freed when the function fails, but the error path in rtw_txq_push_skb() does not free the skb before returning. This can lead to a memory leak in rtw_txq_push() where a dequeued skb is passed to rtw_txq_push_skb().

INFO

Published Date :

Sept. 11, 2026, 8:18 p.m.

Last Modified :

Sept. 14, 2026, 1:18 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2026-80941 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
Solution
Fix potential memory leak by freeing skb in error paths.
  • Apply the patch to the Linux kernel.
  • Ensure skb is freed in error conditions.
  • Update the system with the patched kernel.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-80941 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-80941 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-80941 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-80941 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Sep. 14, 2026

    Action Type Old Value New Value
    Added Affected Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/80xxx/CVE-2026-80941.json">CVE-2026-80941</a>
    Added Reference https://git.kernel.org/stable/c/68676ce3313b74326fbcf21c673728db4c19d3cf
    Added Reference https://git.kernel.org/stable/c/924e75a420a3000e9f189aed26f67556a62f2d57
    Added Reference https://git.kernel.org/stable/c/c86199357a93b9182854cf805d7780a213fda937
    Added Reference https://git.kernel.org/stable/c/e8fd57157ee7a9e2986a9218198a5c1b02f2310b
  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Sep. 11, 2026

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() The skb passed to the rtw_hci_tx_write() is expected to be freed when the function fails, but the error path in rtw_txq_push_skb() does not free the skb before returning. This can lead to a memory leak in rtw_txq_push() where a dequeued skb is passed to rtw_txq_push_skb().
    Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/80xxx/CVE-2026-80941.json">CVE-2026-80941</a>
    Added Reference https://git.kernel.org/stable/c/51d8b35574721cf3fe744f46ebd9629916063fee
    Added Reference https://git.kernel.org/stable/c/6e95852f904edbabf411793093fcfd6f6d49ef27
    Added Reference https://git.kernel.org/stable/c/7364713f0931ee45fdf0bea27103b40ccc94979a
    Added Reference https://git.kernel.org/stable/c/9f2948010764d708bda27369d09ce6f194abe8e3
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.