SB20261022315 - Memory leak in Linux kernel intel iwlegacy driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261022315

SB20261022315 - Memory leak in Linux kernel intel iwlegacy driver

Published: October 22, 2026

Security Bulletin ID SB20261022315
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Memory leak (CVE-ID: CVE-2026-98710)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local privileged user to cause a kernel memory leak that may lead to resource exhaustion and a denial of service.

The vulnerability exists due to missing release of allocated EEPROM memory in il3945_pci_remove() when removing a PCI device after a successful probe. A local privileged user can trigger removal of an affected device to leave its EEPROM allocation unreleased, potentially exhausting kernel memory if the operation is repeated.


Remediation

Install update from vendor's website.

References