CVE-2026-68413

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()

The memory allocated in the ipw2100_alloc_device() function is not freed in some of the error paths in ipw2100_pci_init_one(). Fix that by converting the direct return into a goto to the error path return.

The error path when pci_enable_device() fails cannot jump to fail, since at this point priv is not set, so perform error handling inline.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 2c86c275015c880e810830304a3a4ab94803b38b, < 71614326ab43e8b8f392ba865aeb6d7e327dff7d; >= 2c86c275015c880e810830304a3a4ab94803b38b, < 9b080198a22fd809c4e7f6793eafab53ac2643fd; >= 2c86c275015c880e810830304a3a4ab94803b38b, < 768a701362a8f77b62c14f8202ad559b7ecbb0c6; >= 2c86c275015c880e810830304a3a4ab94803b38b, < f75b9a2a9d8334ae0f9c5e47df7b31f7aeb1fdbe; >= 2c86c275015c880e810830304a3a4ab94803b38b, < 836a19c654dcb1b01878a70090af016fbd0fd7e5; >= 2c86c275015c880e810830304a3a4ab94803b38b, < f442e581a88937671a22ceb3806c186265ef6254; >= 2c86c275015c880e810830304a3a4ab94803b38b, < 7cbda50eebcd9aa00b0de382f776287cf7a36cf8; >= 2c86c275015c880e810830304a3a4ab94803b38b, < 0d388f62031dbabcba0f44bb91b59f10e88cac17
LinuxLinux2.6.14

References

Timeline

Published
Aug 10, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-684147.5In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211_CVE-2026-684157.8In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrm_state_gc_task CVE-2026-68416In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARN_ON in add_mtd_device() error paths When CVE-2026-684177.8In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_create_qp() currently caCVE-2026-68418In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null deref on QP create Previously,CVE-2026-684197.8In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regions When a QP/CQ/SRQ is cCVE-2026-68422.5A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777CVE-2026-684207.1In the Linux kernel, the following vulnerability has been resolved: xfrm: reject optional IPTFS templates in outbound policies syzbot repoCVE-2026-68421In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() CVE-2026-68422In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_rooCVE-2026-68423In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy() mtd_CVE-2026-68424In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()
CVE-2026-68413: Unscored | Vulnix