{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"f01eec75fd372961550b928902f3a2c11fca1daf","status":"affected","version":"09b4a4faf9d037990ac4f8110dd944b27b42d5df","versionType":"git"},{"lessThan":"3d8b9b290421c3cd505fcd2f551f143f8142786a","status":"affected","version":"09b4a4faf9d037990ac4f8110dd944b27b42d5df","versionType":"git"},{"lessThan":"08b71bd92317f99642b842cfc0d30200868162fc","status":"affected","version":"09b4a4faf9d037990ac4f8110dd944b27b42d5df","versionType":"git"},{"lessThan":"a02b52fe54f7b5107aefa1ce28c2f69749c57616","status":"affected","version":"09b4a4faf9d037990ac4f8110dd944b27b42d5df","versionType":"git"},{"lessThan":"45e9ac538cdff7bce656d731114a64eda85af0d7","status":"affected","version":"09b4a4faf9d037990ac4f8110dd944b27b42d5df","versionType":"git"},{"lessThan":"bdc0b8bfdc142439d6708b072e8159eb515ee7b0","status":"affected","version":"09b4a4faf9d037990ac4f8110dd944b27b42d5df","versionType":"git"},{"lessThan":"a7584f261e64fe14e45bdf70f343e16c1ee3a037","status":"affected","version":"09b4a4faf9d037990ac4f8110dd944b27b42d5df","versionType":"git"},{"lessThan":"95fc02722edde02946d0d475221f2b2054d3d8ba","status":"affected","version":"09b4a4faf9d037990ac4f8110dd944b27b42d5df","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"4.20"},{"lessThan":"4.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.40","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-72004","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix memory leak in ieee80211_register_hw()\n\nIf kmemdup() fails while copying supported band structures, the error\npath jumps to fail_rate. This skips rate_control_deinitialize() and\nleaks the initialized local->rate_ctrl.\n\nFix this by adding a fail_band label that shares the rate-control cleanup\npath before falling through to the remaining teardown.\n\nThe bug was first flagged by an experimental analysis tool we are\ndeveloping for kernel memory-management bugs while analyzing\nv6.13-rc1. The tool is still under development and is not yet publicly\navailable. Manual inspection confirms that the bug is still present in\nv7.1-rc7.\n\nAn x86_64 allyesconfig build showed no new warnings. As we do not have a\nsuitable mac80211 device/driver combination to test with, no runtime\ntesting was able to be performed.","epss":{"date":"2026-11-06","percentile":0.12539,"score":0.0022},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985574623,"publishedAt":1786773095363,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/f01eec75fd372961550b928902f3a2c11fca1daf"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3d8b9b290421c3cd505fcd2f551f143f8142786a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/08b71bd92317f99642b842cfc0d30200868162fc"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a02b52fe54f7b5107aefa1ce28c2f69749c57616"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/45e9ac538cdff7bce656d731114a64eda85af0d7"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/bdc0b8bfdc142439d6708b072e8159eb515ee7b0"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a7584f261e64fe14e45bdf70f343e16c1ee3a037"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/95fc02722edde02946d0d475221f2b2054d3d8ba"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/08b71bd92317f99642b842cfc0d30200868162fc"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/3d8b9b290421c3cd505fcd2f551f143f8142786a"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/45e9ac538cdff7bce656d731114a64eda85af0d7"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/95fc02722edde02946d0d475221f2b2054d3d8ba"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/a02b52fe54f7b5107aefa1ce28c2f69749c57616"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/a7584f261e64fe14e45bdf70f343e16c1ee3a037"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/bdc0b8bfdc142439d6708b072e8159eb515ee7b0"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/f01eec75fd372961550b928902f3a2c11fca1daf"}],"remediation":[],"revision":"b4c8c314252e161b2de698e2b454d6247f9c6aefc0d3cbb2058d2b26a47f2474","sources":[{"modifiedAt":1793984117970,"name":"CNA: Linux","retrievedAt":1793986019217,"url":"https://www.cve.org/CVERecord?id=CVE-2026-72004"},{"modifiedAt":1793985574623,"name":"NVD","retrievedAt":1793989674897,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72004"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986036910,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-72004"}],"ssvc":{"assessedAt":1793983816811,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"wifi: mac80211: fix memory leak in ieee80211_register_hw()","updatedAt":1793989674897}