In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlegacy: 3945: free EEPROM data on remove

il3945 pci probe() calls il eeprom init(), which allocates memory for the EEPROM data. The probe failure paths release this allocation with il eeprom free(), but the remove path does not free it after a successful probe.

As a result, the EEPROM data is leaked when the PCI device is removed.

Free the EEPROM data in il3945 pci remove() before releasing the mac80211 hardware structure.

This issue was found by manual code inspection.