Memory Leak Vulnerability in Linux Kernel's mt7615 Driver

CVE-2025-68765

What is CVE-2025-68765?

The Linux kernel's mt7615 driver contains a memory leak vulnerability that arises from improper handling of allocated socket buffers (skbs). When executing the function mt7615_mcu_wtbl_sta_add(), if the subsequent allocation request fails, the function does not free the allocated skb, resulting in unintentional memory retention. This oversight can lead to reduced performance and potential service disruptions in devices utilizing the affected driver. To remediate this, it is crucial to ensure that memory management functions, such as dev_kfree_skb(), are called correctly in error-handling scenarios.

References