CVE-2026-98710

wifi: iwlegacy: 3945: free EEPROM data on remove

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlegacy: 3945: free EEPROM data on remove

il3945_pci_probe() calls il_eeprom_init(), which allocates memory for the EEPROM data. The probe failure paths release this allocation with il_eeprom_free(), but the remove path does not free it after a successful probe.

As a result, the EEPROM data is leaked when the PCI device is removed.

Free the EEPROM data in il3945_pci_remove() before releasing the mac80211 hardware structure.

This issue was found by manual code inspection.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before 52990dd317f76c1baa3665e3b1513cf3d4b48f5eAffected 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before a17d3fbca1731ae84c03a3dea0970f62f19757fbAffected 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before 39a3af97a23f6778887528c1fb4ffc60017ed0e6Affected 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before 3ebc529726c0c038f49e513a7a6f1893552ee803Affected 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before ab7bee2cd55f665cb29fa0ace2ec14020e0a452eAffected 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before cd8f8f45d81aac384311701d7ffe26567af2e783Affected 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before 89f9d6186dc7429f38132635526e28549c913c0bAffected 073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before f8ebe286394c0bbb4a6dbacb182a34ab6376922dAffected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before 52990dd317f76c1baa3665e3b1513cf3d4b48f5eAffected
073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before a17d3fbca1731ae84c03a3dea0970f62f19757fbAffected
073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before 39a3af97a23f6778887528c1fb4ffc60017ed0e6Affected
073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before 3ebc529726c0c038f49e513a7a6f1893552ee803Affected
073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before ab7bee2cd55f665cb29fa0ace2ec14020e0a452eAffected
073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before cd8f8f45d81aac384311701d7ffe26567af2e783Affected
073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before 89f9d6186dc7429f38132635526e28549c913c0bAffected
073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to before f8ebe286394c0bbb4a6dbacb182a34ab6376922dAffected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.