Back
CVE-2026-64155wifi: ath11k: fix error path leaks in some WMI WOW calls
- 5.5MediumCVSS base score
- 0.12%Exploitation in 30 daysEPSS · top 98% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly return the result of ath11k_wmi_cmd_send(...). Because we did not check the return value, we also did not free the skb in the error path.
Timeline
ID reserved
By Linux
Published
- 4 months later
· 4 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.12% · top 98% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 79802b13a492d0fdeb922e98628e5ff1a8b74026 – < d6c7b8d0dc22c0a8743435db8f42d98524b70df3
- affected 79802b13a492d0fdeb922e98628e5ff1a8b74026 – < cd43d587dd333517c806cd24696e6e1a26b9951e
- affected 79802b13a492d0fdeb922e98628e5ff1a8b74026 – < 3d675896ea03aca631852a2a7e91e6cb8f664967
- affected 79802b13a492d0fdeb922e98628e5ff1a8b74026 – < 008955b1348452de25bc19d6e0f0f673d4cb9a3c
- affected 79802b13a492d0fdeb922e98628e5ff1a8b74026 – < acde4692afcdaea6de3e2996ddfaeaa7ae6b0130
- affected 79802b13a492d0fdeb922e98628e5ff1a8b74026 – < d618d322b95c80d5ad7091f35a7193e4050dcc27
- affected 79802b13a492d0fdeb922e98628e5ff1a8b74026 – < 55dda532bbc261aef495e403c8900c5e2ab5fa34
- affected 5.11
- unaffected < 5.11
- unaffected 5.15.209 – ≤ 5.15.*
- unaffected 6.1.175 – ≤ 6.1.*
- unaffected 6.6.142 – ≤ 6.6.*
- unaffected 6.12.92 – ≤ 6.12.*
- unaffected 6.18.34 – ≤ 6.18.*
- unaffected 7.0.11 – ≤ 7.0.*
- unaffected 7.1 – ≤ *
References
References7
- https://git.kernel.org/stable/c/d6c7b8d0dc22c0a8743435db8f42d98524b70df3 (opens in a new tab)
- https://git.kernel.org/stable/c/cd43d587dd333517c806cd24696e6e1a26b9951e (opens in a new tab)
- https://git.kernel.org/stable/c/3d675896ea03aca631852a2a7e91e6cb8f664967 (opens in a new tab)
- https://git.kernel.org/stable/c/008955b1348452de25bc19d6e0f0f673d4cb9a3c (opens in a new tab)
- https://git.kernel.org/stable/c/acde4692afcdaea6de3e2996ddfaeaa7ae6b0130 (opens in a new tab)
- https://git.kernel.org/stable/c/d618d322b95c80d5ad7091f35a7193e4050dcc27 (opens in a new tab)
- https://git.kernel.org/stable/c/55dda532bbc261aef495e403c8900c5e2ab5fa34 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-45840 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-64155)Record last updated .