PT-2026-90078 · Linux · Linux

CVE-2026-80948

·

Published

2026-09-11

·

Updated

2026-09-11

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: dvm: fix memory leak in iwl op mode dvm start()
In iwl op mode dvm start(), jumping to out free eeprom currently bypasses the out free eeprom blob label. Consequently, error paths triggered after successfully parsing the EEPROM free priv->nvm data but leak priv->eeprom blob.
Fix this memory leak by reordering the error handling labels so that out free eeprom falls through to out free eeprom blob.
The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc6.
An x86 64 allyesconfig build showed no new warnings. As we do not have supported Intel DVM wireless hardware and firmware to test with, no runtime testing was able to be performed.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-80948

Affected Products

Linux