{"schema":"threatline.record/2","record":{"id":"CVE-2026-98426","aliases":[],"summary":"wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path\n\nmwifiex_pcie_request_irq() registers each MSI-X vector with a per-index\ndev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop\n\"for (j = 0; j < i; j++)\" frees msix_entries[j].vector but passes the\nfailed index's &card->msix_ctx[i] as the dev_id. free_irq() matches on\n(irq, dev_id), so it fails to find the action registered with\n&card->msix_ctx[j]: the already-requested IRQ j is not freed (leaked) and\nfree_irq() warns about freeing a non-existent IRQ. Use &card->msix_ctx[j].","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98426","source_modified_at":"2026-10-19T09:19:20.215Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"99074fc1e67b374b5c72406a23ac01fed806d634","lessThan":"11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd","status":"affected","versionType":"git"},{"version":"99074fc1e67b374b5c72406a23ac01fed806d634","lessThan":"1a60cb2292194cc9eafae7ca8a8a72d37ae78d97","status":"affected","versionType":"git"},{"version":"99074fc1e67b374b5c72406a23ac01fed806d634","lessThan":"fcac5813f324cd07dfd36b4adf624fc70f7587d6","status":"affected","versionType":"git"},{"version":"99074fc1e67b374b5c72406a23ac01fed806d634","lessThan":"2761b21cb896b1da8dd46cee5084c9032b2d7098","status":"affected","versionType":"git"},{"version":"99074fc1e67b374b5c72406a23ac01fed806d634","lessThan":"5fd4cc87e6cc0839aac89c24ebe39ce262fe088f","status":"affected","versionType":"git"},{"version":"99074fc1e67b374b5c72406a23ac01fed806d634","lessThan":"0969c9688389f2e0f65b1a924b0dd6625a3bb776","status":"affected","versionType":"git"},{"version":"99074fc1e67b374b5c72406a23ac01fed806d634","lessThan":"03d5e4776e8b71c2468c5c3c48b39202c87a8796","status":"affected","versionType":"git"},{"version":"99074fc1e67b374b5c72406a23ac01fed806d634","lessThan":"a3d722190cdef18da4878b5efc27c3c386dda248","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98426","source_modified_at":"2026-10-19T09:19:20.215Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"4.6","status":"affected"},{"version":"0","lessThan":"4.6","status":"unaffected","versionType":"semver"},{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.112","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.54","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.8","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98426","source_modified_at":"2026-10-19T09:19:20.215Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98426","source_modified_at":"2026-10-19T09:19:20.215Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"1a60cb2292194cc9eafae7ca8a8a72d37ae78d97","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98426","source_modified_at":"2026-10-19T09:19:20.215Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"2761b21cb896b1da8dd46cee5084c9032b2d7098","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98426","source_modified_at":"2026-10-19T09:19:20.215Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"5fd4cc87e6cc0839aac89c24ebe39ce262fe088f","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98426","source_modified_at":"2026-10-19T09:19:20.215Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"0969c9688389f2e0f65b1a924b0dd6625a3bb776","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98426","source_modified_at":"2026-10-19T09:19:20.215Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"03d5e4776e8b71c2468c5c3c48b39202c87a8796","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.0022,"percentile":0.11867,"score_date":"2026-10-23"},"published_at":"2026-10-14T13:27:53.177Z","modified_at":"2026-10-19T09:19:20.215Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-98426","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:19:20.215Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98426","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/1a60cb2292194cc9eafae7ca8a8a72d37ae78d97"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/fcac5813f324cd07dfd36b4adf624fc70f7587d6"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/2761b21cb896b1da8dd46cee5084c9032b2d7098"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/5fd4cc87e6cc0839aac89c24ebe39ce262fe088f"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/0969c9688389f2e0f65b1a924b0dd6625a3bb776"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/03d5e4776e8b71c2468c5c3c48b39202c87a8796"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/a3d722190cdef18da4878b5efc27c3c386dda248"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:19:20.215Z","content_hash":"523b23dbb1ccc258b0d495b16c7cebaff2b612be2377b7db401f3810d5d96033"}}