CVE-2026-68413: wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()
In the Linux kernel, the following vulnerability has been resolved:
wifi: ipw2100: fix potential memory leak in ipw2100pciinitone()
The memory allocated in the ipw2100allocdevice() function is not freed in some of the error paths in ipw2100pciinitone(). Fix that by converting the direct return into a goto to the error path return.
The error path when pcienabledevice() fails cannot jump to fail, since at this point priv is not set, so perform error handling inline.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.150.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68413?
The severity of CVE-2026-68413 is rated as 4.
How do I fix CVE-2026-68413?
To fix CVE-2026-68413, update to the latest version of the Linux Kernel that includes the patch for this vulnerability.
What is the impact of CVE-2026-68413?
The impact of CVE-2026-68413 is a potential memory leak in the ipw2100 wireless driver.
Is CVE-2026-68413 related to the Linux kernel?
Yes, CVE-2026-68413 is a vulnerability found in the Linux kernel's ipw2100 wireless driver.
Who is affected by CVE-2026-68413?
Users running vulnerable versions of the Linux kernel with the ipw2100 driver may be affected by CVE-2026-68413.