Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64155

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly return the result of ath11k_wmi_cmd_send(...). Because we did not check the return value, we also did not free the skb in the error path.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:72e775e521988d5c16c1623d920719a6298d5a6bf794b39133591a5c8f12323b
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/ath/ath11k/wmi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.11"},{"lessThan":"5.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semv…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/ath/ath11k/wmi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d6c7b8d0dc22c0a8743435db8f42d98524b70df3","status":"affected","version":"79802b13a492d0fdeb922e98628e5ff1a8b74026","versionType":"git"},{"lessThan":"cd43d587dd333517c806cd24696e6e1a26b9951e","status":"affected","version":"79802b13a492d0fdeb922e98628e5ff1a8b74026","versionType":"git"},{"lessThan":"3d675896ea03aca631852a2a7e91e6cb8f664967","status":"affected","version":"79802b13…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/ath/ath11k/wmi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.11"},{"lessThan":"5.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semv…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/ath/ath11k/wmi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d6c7b8d0dc22c0a8743435db8f42d98524b70df3","status":"affected","version":"79802b13a492d0fdeb922e98628e5ff1a8b74026","versionType":"git"},{"lessThan":"cd43d587dd333517c806cd24696e6e1a26b9951e","status":"affected","version":"79802b13a492d0fdeb922e98628e5ff1a8b74026","versionType":"git"},{"lessThan":"3d675896ea03aca631852a2a7e91e6cb8f664967","status":"affected","version":"79802b13…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/008955b1348452de25bc19d6e0f0f673d4cb9a3c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/3d675896ea03aca631852a2a7e91e6cb8f664967"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/55dda532bbc261aef495e403c8900c5e2ab5fa34"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/acde4692afcdaea6de3e2996ddfaeaa7ae6b0130"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/cd43d587dd333517c806cd24696e6e1a26b9951e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/d618d322b95c80d5ad7091f35a7193e4050dcc27"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/d6c7b8d0dc22c0a8743435db8f42d98524b70df3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a45f08b51685947d84210d406419eeb65265ac9bce1f31a2021e8411c4b8c1dd · sha256:063c700f9ec0db9c… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer