Linux Kernel Vulnerability in ath11k WMI Commands

CVE-2026-64155

What is CVE-2026-64155?

A vulnerability in the Linux kernel's ath11k component has been identified that allows for error path leaks in certain Wireless Management Interface (WMI) Wake on Wireless (WOW) calls. This issue arises from directly returning results from ath11k_wmi_cmd_send without proper checks on the return value, which can lead to memory leaks. The identified instances fail to free the socket buffer (skb) in the event of errors, potentially compromising system stability and security. Prompt updates are recommended to mitigate these risks.

References