---
id: CVE-2025-68759
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()

  In rtl8180_init_rx_ring(), memory is allocated for skb packets and DMA
  allocations in a loop
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()

  In rtl8180_init_rx_ring(), memory is allocated for skb packets and DMA
  allocations in a loop. When …
severity: none
published: '2026-01-05'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:10:00.297'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68759'
references:
  - url: 'https://git.kernel.org/stable/c/3677c01891fb0239361e444afee8398868e34bdf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/89caaeee8dd95fae8bb4f4964e6fe3ca688500c4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9b5b9c042b30befc5b37e4539ace95af70843473'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a4fb7cca9837378878e6c94d9e7af019c8fdfcdb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a813a74570212cb5f3a7d3b05c0cb0cd00bace1d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bf8513dfa31ea015c9cf415796dca2113d293840'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c9d1c4152e6d32fa74034464854bee262a60bc43'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ee7db11742b30641f21306105ad27a275e3c61d7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00198
epssPercentile: 0.08929
ingestedAt: '2026-10-14T19:49:57.552Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()

In rtl8180_init_rx_ring(), memory is allocated for skb packets and DMA
allocations in a loop. When an allocation fails, the previously
successful allocations are not freed on exit.

Fix that by jumping to err_free_rings label on error, which calls
rtl8180_free_rx_ring() to free the allocations. Remove the free of
rx_ring in rtl8180_init_rx_ring() error path, and set the freed
priv->rx_buf entry to null, to avoid double free.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.