Memory Leak Vulnerability in Linux Kernel Affecting ipw2100 from Intel

CVE-2026-68413

What is CVE-2026-68413?

A vulnerability exists in the Linux kernel related to the ipw2100 network driver, where memory allocated during device initialization may not be freed under certain error conditions. Specifically, during the execution of the ipw2100_pci_init_one() function, if the pci_enable_device() call fails, the process cannot properly handle the error and results in a potential memory leak. The issue has been addressed by modifying the error handling flow to ensure that all memory is appropriately managed, preventing resource waste and potential system instability.

References