CVE-2026-98710: wifi: iwlegacy: 3945: free EEPROM data on remove
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlegacy: 3945: free EEPROM data on remove
il3945pciprobe() calls ileeprominit(), which allocates memory for the EEPROM data. The probe failure paths release this allocation with ileepromfree(), but the remove path does not free it after a successful probe.
As a result, the EEPROM data is leaked when the PCI device is removed.
Free the EEPROM data in il3945pciremove() before releasing the mac80211 hardware structure.
This issue was found by manual code inspection.
Affected Software
1 affected component
Linux Linux kernel
Event History
Oct 18, 2026
CVE Published
via MITRE·03:46 PM
Data Sourced
via MITRE·03:46 PM
Description
Data Sourced
via NVD·04:17 PM
Description