Linux Kernel Vulnerability in virt_wifi Component Leading to skb Memory Leak

CVE-2026-98351

What is CVE-2026-98351?

A vulnerability in the Linux kernel's virt_wifi component leads to a memory leak issue when the simulated link is disconnected. Specifically, the function virt_wifi_start_xmit() returns NET_XMIT_DROP without properly freeing the socket buffer (skb). Consequently, dev_hard_start_xmit() misinterprets this return status as a consumed packet, allowing any packet sent while disconnected to cause a leak of its skb. To mitigate this issue, it is essential to free the skb before returning a drop status, ensuring system stability and resource integrity.

References