Live › vulnerability › CVE-2026-98710
Go to dashboardThe Linux kernel's iwlegacy driver for Intel 3945 Wi-Fi cards allocates EEPROM data during probe but does not free it when the PCI device is removed. The leak causes memory to be lost on device removal; the sources describe no attacker-controlled impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only systems with an Intel PRO/Wireless 3945 Wi-Fi card driven by the legacy iwlegacy/iwl3945 kernel driver, where the PCI device is removed or unbound. Systems without this hardware, or with a newer Wi-Fi card, are not affected.
No product ranges from the sources yet.
uname -r and check whether the running kernel includes the upstream fix for iwlegacy 3945 EEPROM removal.lspci -nnk | grep -A3 -i network to see whether an Intel 3945 card uses the iwl3945 driver.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlegacy: 3945: free EEPROM data on remove
il3945_pci_probe() calls il_eeprom_init(), which allocates memory for the EEPROM data. The probe failure paths release this allocation with il_eeprom_free(), but the remove path does not free it after a successful probe.
As a result, the EEPROM data is leaked when the PCI device is removed.
Free the EEPROM data in il3945_pci_remove() before releasing the mac80211 hardware structure.
This issue was found by manual code inspection.
This page as .md · .json · in your agent: get_signal("CVE-2026-98710")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.