CVE-2026-53104

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-06-24 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak destroying device All MT76 rx queues have an associated page_pool even if the queue is not associated to a NAPI (e.g. WED RRO queues with WED enabled). Destroy the page_pool running mt76_dma_cleanup routine during module unload. Moreover returns pages to the page pool if WED is not enabled for WED RRO queues.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
Linux Linux 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 < 3c363fc4dbdb77a3f02dcf6ba90c1f0a111ef055
Linux Linux 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 < dcbc13d19bef3326c72f324b10f5a3e5fc4d71de
Linux Linux 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 < 4b7c92fd8b8700fac387ff43c6f6e0c4e05ec93f
Linux Linux 950d0abb5cd94f2b0710c5c42ac4398c91a7ff22 < 6b470f36616e3448d44b0ef4b1de2a3e3a31b5be
Linux Linux 6.8
linux linux_kernel 6.8 – 6.18.33

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.16%
Raw Score 0.001620
Percentile 5.4%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00162
2026-11-12
0.00162
2026-11-10
0.00162
2026-11-09
0.00162
2026-11-08
0.00162
2026-11-07
0.00162
2026-11-06
0.00162

Intelligence Sources

mitre ref →
nvd ref →