PT-2026-61462 · Linux+1 · Linux Kernel+1

CVE-2026-64145

·

Published

2026-07-19

·

Updated

2026-09-07

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak occurs in the wilc wlan firmware download() function when a bus acquire failure happens. The function allocates a dma buffer using kmalloc(), but an early error path uses a direct return instead of routing through the cleanup label, causing the allocated memory to be leaked.
Recommendations Replace the early return in the wilc wlan firmware download() function with a goto fail statement to ensure the dma buffer is properly freed via kfree().

Exploit

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-64145
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu