CVE-2026-98710
Linux: wifi: iwlegacy: 3945: free EEPROM data on remove
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3ebc529726c0c038f49e513a7a6f1893552ee803Also 89f9d6186dc7429f38132635526e28549c913c0bCVE List
What fixes it
- 3ebc529726c0c038f49e513a7a6f1893552ee803LinuxCVE List
- 89f9d6186dc7429f38132635526e28549c913c0bLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlegacy: 3945: free EEPROM data on remove
il3945_pci_probe() calls il_eeprom_init(), which allocates memory for the EEPROM data. The probe failure paths release this allocation with il_eeprom_free(), but the remove path does not free it after a successful probe.
As a result, the EEPROM data is leaked when the PCI device is removed.
Free the EEPROM data in il3945_pci_remove() before releasing the mac80211 hardware structure.
This issue was found by manual code inspection.
Text from CVE List
Affected versions 12
- Linuxaffected: 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 before 3ebc529726c0c038f49e513a7a6f1893552ee803CVE List
- Linuxaffected: 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 before ab7bee2cd55f665cb29fa0ace2ec14020e0a452eCVE List
- Linuxaffected: 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 before cd8f8f45d81aac384311701d7ffe26567af2e783CVE List
- Linuxaffected: 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 before 89f9d6186dc7429f38132635526e28549c913c0bCVE List
- Linuxaffected: 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 before f8ebe286394c0bbb4a6dbacb182a34ab6376922dCVE List
- Linuxaffected: 2.6.27CVE List
- Linuxunaffected: all versions before 2.6.27CVE List
- Linuxunaffected: 6.6.160 through 6.6.*CVE List
- Linuxunaffected: 6.12.113 through 6.12.*CVE List
- Linuxunaffected: 6.18.56 through 6.18.*CVE List
- Linuxunaffected: 7.2.10 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List
References 5
- git.kernel.org/stable/c/3ebc529726c0c038f49e513a7a6f1893552ee803Referencevia CVE List
- git.kernel.org/stable/c/ab7bee2cd55f665cb29fa0ace2ec14020e0a452eReferencevia CVE List
- git.kernel.org/stable/c/cd8f8f45d81aac384311701d7ffe26567af2e783Referencevia CVE List
- git.kernel.org/stable/c/89f9d6186dc7429f38132635526e28549c913c0bReferencevia CVE List
- git.kernel.org/stable/c/f8ebe286394c0bbb4a6dbacb182a34ab6376922dReferencevia CVE List