CVE-2026-80940

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: pci: fix resource leak on failed NAPI setup rtw_pci_probe() allocates PCI resources through rtw_pci_setup_resource() before it sets up NAPI. If rtw_pci_napi_init() fails, the error path jumps straight to err_pci_declaim and skips rtw_pci_destroy(), leaving the PCI resources allocated by rtw_pci_setup_resource() behind. Add a dedicated cleanup label for the NAPI setup failure path so probe destroys the PCI resources. The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing current mainline kernels. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc7. An x86_64 allyesconfig build showed no new warnings. As we do not have a suitable rtw88 PCI board to test with, no runtime testing was able to be performed.

• https://git.kernel.org/stable/c/34a505071d1ffc5ebf3dc3cd16d2a12b044bcc84
• https://git.kernel.org/stable/c/481fff9bda01720c70b19fb260808145a3f21594
• https://git.kernel.org/stable/c/b1596e212ab1739930b25b9d3daf6b5cd307b537
• https://git.kernel.org/stable/c/e779df4806cd29cbcca5c9dc0a1073662c76b889

Published

Sep 11, 2026

Last Modified

Sep 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-80935In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-80936In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-80937In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-80938In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80939In the Linux kernel, the following vulnerability has been re…
• CVE-2026-8094Other issue in the WebRTC component. This vulnerability was …9.8
• CVE-2026-80941In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80942In the Linux kernel, the following vulnerability has been re…
• CVE-2026-80943In the Linux kernel, the following vulnerability has been re…7.6
• CVE-2026-80944In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-80945In the Linux kernel, the following vulnerability has been re…9.1
• CVE-2026-80946In the Linux kernel, the following vulnerability has been re…