DMA Buffer Leak in Linux Kernel's WILC1000 Wi-Fi Driver

CVE-2026-64145

What is CVE-2026-64145?

A DMA buffer leak has been identified in the WILC1000 Wi-Fi driver within the Linux kernel, stemming from an early return path that bypasses proper memory management. The wilc_wlan_firmware_download() function allocates a DMA buffer but fails to free it when the bus acquisition encounters an error, leading to potential memory leaks. This issue can be resolved by modifying the error handling to route through the appropriate cleanup path. Users of affected Linux kernel versions should apply the provided patches to mitigate this vulnerability and ensure stable system performance.

References