CVE-2026-98426
Published Oct 14, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiex_pcie_request_irq() registers each MSI-X vector with a per-index dev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop "for (j = 0; j < i; j++)" frees msix_entries[j].vector but passes the failed index's &card->msix_ctx[i] as the dev_id. free_irq() matches on (irq, dev_id), so it fails to find the action registered with &card->msix_ctx[j]: the already-requested IRQ j is not freed (leaked) and free_irq() warns about freeing a non-existent IRQ. Use &card->msix_ctx[j].
Is your site exposed to CVE-2026-98426?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/03d5e4776e8b71c2468c5c3c48b39202c87a8796
https://git.kernel.org/stable/c/0969c9688389f2e0f65b1a924b0dd6625a3bb776
https://git.kernel.org/stable/c/11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd
https://git.kernel.org/stable/c/1a60cb2292194cc9eafae7ca8a8a72d37ae78d97
https://git.kernel.org/stable/c/2761b21cb896b1da8dd46cee5084c9032b2d7098
https://git.kernel.org/stable/c/5fd4cc87e6cc0839aac89c24ebe39ce262fe088f
https://git.kernel.org/stable/c/a3d722190cdef18da4878b5efc27c3c386dda248
https://git.kernel.org/stable/c/fcac5813f324cd07dfd36b4adf624fc70f7587d6
Frequently Asked Questions
What is CVE-2026-98426? +
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path
mwifiex_pcie_request_irq() registers each MSI-X vector with a per-index
dev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop
"for (j = 0; j < i; j++)" frees msix_entries[j].vector but passes the
failed index's &card->msix_ctx[i] as the dev_id. free_irq() matches on
(irq, dev_id), so it fails to find the action registered with
&card->msix_ctx[j]: the already-requested IRQ j is not freed (leaked) and
free_irq() warns about freeing a non-existent IRQ. Use &card->msix_ctx[j].
How do I check if I'm vulnerable to CVE-2026-98426? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.