In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix error path leaks in some WMI WOW calls

Fix two instances where we used to directly return the result of
ath11k_wmi_cmd_send(...). Because we did not check the return value, we
also did not free the skb in the error path.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00173.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
79802b13a492d0fdeb922e98628e5ff1a8b74026 affected < d6c7b8d0dc22c0a8743435db8f42d98524b70df3
79802b13a492d0fdeb922e98628e5ff1a8b74026 affected < cd43d587dd333517c806cd24696e6e1a26b9951e
79802b13a492d0fdeb922e98628e5ff1a8b74026 affected < 3d675896ea03aca631852a2a7e91e6cb8f664967
79802b13a492d0fdeb922e98628e5ff1a8b74026 affected < 008955b1348452de25bc19d6e0f0f673d4cb9a3c
79802b13a492d0fdeb922e98628e5ff1a8b74026 affected < acde4692afcdaea6de3e2996ddfaeaa7ae6b0130
79802b13a492d0fdeb922e98628e5ff1a8b74026 affected < d618d322b95c80d5ad7091f35a7193e4050dcc27
79802b13a492d0fdeb922e98628e5ff1a8b74026 affected < 55dda532bbc261aef495e403c8900c5e2ab5fa34
Linux Linux affected
Version Status Constraints
5.11 affected —
0 unaffected < 5.11
5.15.209 unaffected ≤ 5.15.*
6.1.175 unaffected ≤ 6.1.*
6.6.142 unaffected ≤ 6.6.*
6.12.92 unaffected ≤ 6.12.*
6.18.34 unaffected ≤ 6.18.*
7.0.11 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/008955b1348452de25bc19d6e0f0f673d4cb9a3c cve-icon
https://git.kernel.org/stable/c/3d675896ea03aca631852a2a7e91e6cb8f664967 cve-icon
https://git.kernel.org/stable/c/55dda532bbc261aef495e403c8900c5e2ab5fa34 cve-icon
https://git.kernel.org/stable/c/acde4692afcdaea6de3e2996ddfaeaa7ae6b0130 cve-icon
https://git.kernel.org/stable/c/cd43d587dd333517c806cd24696e6e1a26b9951e cve-icon
https://git.kernel.org/stable/c/d618d322b95c80d5ad7091f35a7193e4050dcc27 cve-icon
https://git.kernel.org/stable/c/d6c7b8d0dc22c0a8743435db8f42d98524b70df3 cve-icon
https://lore.kernel.org/linux-cve-announce/2026071932-CVE-2026-64155-7dde@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-64155 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-64155 cve-icon
History

Mon, 20 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Sun, 19 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly return the result of ath11k_wmi_cmd_send(...). Because we did not check the return value, we also did not free the skb in the error path.
Title wifi: ath11k: fix error path leaks in some WMI WOW calls
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-19T15:40:43.545Z

Reserved: 2026-07-19T07:54:57.038Z

Link: CVE-2026-64155

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Low

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-64155 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses