The Linux kernel mt76 WiFi driver contained a memory leak vulnerability where the function mt76_connac_mcu_alloc_sta_req() allocated an skb buffer expected to be freed by mt76_mcu_skb_send_msg(). However, if intermediate functions such as mt76_connac_mcu_sta_wed_update() or mt76_connac_mcu_sta_key_tlv() failed before sending, the allocated skb was leaked. This issue was fixed by explicitly freeing the skb in these error paths. The vulnerability affects multiple Linux kernel versions prior to 7.0.0-28.28 and related variants. The fix has been incorporated in updated kernel packages.

The vulnerability causes a memory leak in the kernel's WiFi driver, which can lead to resource exhaustion and potentially degrade system stability or availability. There is no direct confidentiality or integrity impact reported. The CVSS score is 5.5 with an impact primarily on availability. No known exploits are reported in the wild.

A patch is available and should be applied by updating to Linux kernel versions 7.0.0-28.28 or later and related fixed builds as specified by the vendor. After updating, a system reboot is required. Users should follow the vendor's update instructions and recompile third-party kernel modules if necessary due to ABI changes. No additional mitigation steps are indicated by the vendor advisory.