一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月19日

CVE-2026-98710 – In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: 3945:

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlegacy: 3945: free EEPROM data on remove

il3945_pci_probe() calls il_eeprom_init(), which allocates memory for
the EEPROM data. The probe failure paths release this allocation with
il_eeprom_free(), but the remove path does not free it after a
successful probe.

As a result, the EEPROM data is leaked when the PCI device is removed.

Free the EEPROM data in il3945_pci_remove() before releasing the
mac80211 hardware structure.

This issue was found by manual code inspection.