CVE-2026-68413

Unknown

Last modified

CVE-2026-68413 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() The memory allocated in the ipw2100_alloc_device() function is not freed in some of the error paths in ipw2100_pci_init_one(). Fix that by converting the direct return into a goto to the error path return. The error path when pci_enable_device() fails cannot jump to fail, since at this point priv is not set, so perform error handling inline..

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() The memory allocated in the ipw2100_alloc_device() function is not freed in some of the error paths in ipw2100_pci_init_one(). Fix that by converting the direct return into a goto to the error path return. The error path when pci_enable_device() fails cannot jump to fail, since at this point priv is not set, so perform error handling inline.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 2c86c275015c880e810830304a3a4ab94803b38b, < f75b9a2a9d8334ae0f9c5e47df7b31f7aeb1fdbe; >= 2c86c275015c880e810830304a3a4ab94803b38b, < 836a19c654dcb1b01878a70090af016fbd0fd7e5; >= 2c86c275015c880e810830304a3a4ab94803b38b, < f442e581a88937671a22ceb3806c186265ef6254; >= 2c86c275015c880e810830304a3a4ab94803b38b, < 7cbda50eebcd9aa00b0de382f776287cf7a36cf8; >= 2c86c275015c880e810830304a3a4ab94803b38b, < 0d388f62031dbabcba0f44bb91b59f10e88cac17
LinuxLinux2.6.14

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68413?
In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() The memory allocated in the ipw2100_alloc_device() function is not freed in some of the error paths in ipw2100_pci_init_one(). Fix that by converting the direct return into a goto to the error path return. The error path when pci_enable_device() fails cannot jump to fail, since at this point priv is not set, so perform error handling inline.
How severe is CVE-2026-68413?
Severity scoring for CVE-2026-68413 is pending analysis.
How do I fix CVE-2026-68413?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

Are you affected by CVE-2026-68413?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST