What is the CVSS score of CVE-2026-64155?

CVE-2026-64155 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-64155?

Yes, a patch is available for CVE-2026-64155. Update the affected software to the latest version immediately.

Linux Kernel CVE-2026-64155

EUVD-2026-45840 MEDIUM

Memory Leak (CWE-401)

2026-07-19 Linux

GHSA-fhf8-xvr6-7xg9

Information Disclosure Linux Red Hat Suse

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

5.5 MEDIUM

Local access with low privileges required to reach WOW driver paths; only kernel memory availability impacted, no confidentiality or integrity exposure.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

4.7 MEDIUM

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.5 LOW

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 15:24 vuln.today

CVSS changed

Aug 17, 2026 - 15:22 NVD

5.5 (MEDIUM)

Patch available

Jul 19, 2026 - 17:03 EUVD

CVE Published

Jul 19, 2026 - 15:40 nvd

MEDIUM 5.5

CVE Published

Jul 19, 2026 - 15:40 cve.org

UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix error path leaks in some WMI WOW calls

Fix two instances where we used to directly return the result of ath11k_wmi_cmd_send(...). Because we did not check the return value, we also did not free the skb in the error path.

AnalysisAI

Memory leak in the Linux kernel's ath11k WiFi driver (Qualcomm Atheros 802.11ax) allows a local low-privileged user to exhaust kernel memory by triggering error paths in two WMI Wake-on-WLAN (WOW) command functions that fail to free associated socket buffers (skb) on failure. Patched across all active stable kernel branches (5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, 7.0.11, and mainline 7.1). No active exploitation has been identified, with EPSS at 0.17% (7th percentile), consistent with a routine driver memory management fix rather than a weaponizable vulnerability.

Technical ContextAI

The ath11k driver manages Qualcomm Atheros 802.11ax (Wi-Fi 6) chipsets in the Linux kernel using the WMI (Wireless Module Interface) protocol to communicate between the host driver and device firmware. The WOW (Wake-on-WLAN) subsystem enables the wireless adapter to wake the host system from sleep upon receiving specific network events, requiring firmware commands to be packaged in sk_buff (socket buffer) structures and dispatched via ath11k_wmi_cmd_send(). CWE-401 (Missing Release of Memory after Effective Lifetime) is the root cause: two error paths in the WOW-related WMI call sites returned the result of ath11k_wmi_cmd_send() directly without first checking for failure and freeing the allocated skb, causing a kernel memory leak on every failed command send. The CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* applies across multiple stable branches from the introducing commit 79802b13a492d0fdeb922e98628e5ff1a8b74026 onward.

RemediationAI

Update to the patched kernel version appropriate for the installed branch: 5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, 7.0.11, or mainline 7.1. Ubuntu users should apply USN-8575-1 via the standard package manager (https://ubuntu.com/security/notices/USN-8575-1). Upstream fix commits are available on kernel.org at https://git.kernel.org/stable/c/d6c7b8d0dc22c0a8743435db8f42d98524b70df3 and six additional branch-specific commits. For systems where immediate kernel upgrade is not feasible, blacklisting the ath11k module with 'echo blacklist ath11k >> /etc/modprobe.d/blacklist.conf && modprobe -r ath11k' eliminates the vulnerable code path entirely, with the trade-off of disabling all Qualcomm Atheros 802.11ax WiFi functionality. Systems without ath11k-supported hardware require no action.

Same weakness CWE-401 – Memory Leak

View all

CVE-2020-13934 HIGH

7.5

CVE-2016-4232 HIGH POC

7.5

CVE-2024-25450 HIGH POC

8.8

CVE-2023-33718 HIGH POC

8.8

CVE-2019-6128 HIGH POC

8.8

CVE-2026-67183 HIGH POC

8.7

CVE-2023-34451 HIGH POC

8.2

CVE-2023-41484 HIGH POC

8.1

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

CVE-2026-64155 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-64155

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-401 – Memory Leak

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code