CVE-2026-98710None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: 3945: free EEPROM data on remove il3945_pci_probe() calls il_eeprom_init(), which allocates memory for the EEPROM data. The probe failure paths release…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlegacy: 3945: free EEPROM data on remove
il3945_pci_probe() calls il_eeprom_init(), which allocates memory for the EEPROM data. The probe failure paths release this allocation with il_eeprom_free(), but the remove path does not free it after a successful probe.
As a result, the EEPROM data is leaked when the PCI device is removed.
Free the EEPROM data in il3945_pci_remove() before releasing the mac80211 hardware structure.
This issue was found by manual code inspection.
Linux >= 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 < ab7bee2cd55f665cb29fa0ace2ec14020e0a452eLinux >= 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 < cd8f8f45d81aac384311701d7ffe26567af2e783Linux >= 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 < 89f9d6186dc7429f38132635526e28549c913c0bLinux >= 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 < f8ebe286394c0bbb4a6dbacb182a34ab6376922dLinux 2.6.27Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers
CVE-2026-98776Nonebinderfs: fix UAF write in binder_add_device