PT-2026-61462 · Linux · Linux
CVE-2026-64145
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1000: fix dma buffer leak on bus acquire failure
wilc wlan firmware download() allocates dma buffer with kmalloc() at
the top of the function and uses a 'fail:' label to free it via
kfree(dma buffer) on error.
All later error paths correctly use 'goto fail' to route through this
cleanup. However, the early failure path after the first acquire bus()
call uses a bare 'return ret;', which leaks dma buffer whenever the bus
acquire fails.
Replace the early return with goto fail so the existing cleanup path
runs.
Found via a custom Coccinelle semantic patch hunting for kmalloc'd
locals leaked on early-return error paths in driver firmware-download
code.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux