CVE-2026-98710

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: 3945: free EEPROM data on remove il3945_pci_probe() calls il_eeprom_init(), which allocates memory for the EEPROM data. The probe failure paths release this allocation with il_eeprom_free(), but the remove path does not free it after a successful probe. As a result, the EEPROM data is leaked when the PCI device is removed. Free the EEPROM data in il3945_pci_remove() before releasing the mac80211 hardware structure. This issue was found by manual code inspection.

Is your site exposed to CVE-2026-98710?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0018

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/3ebc529726c0c038f49e513a7a6f1893552ee803 https://git.kernel.org/stable/c/89f9d6186dc7429f38132635526e28549c913c0b https://git.kernel.org/stable/c/ab7bee2cd55f665cb29fa0ace2ec14020e0a452e https://git.kernel.org/stable/c/cd8f8f45d81aac384311701d7ffe26567af2e783 https://git.kernel.org/stable/c/f8ebe286394c0bbb4a6dbacb182a34ab6376922d

Frequently Asked Questions

What is CVE-2026-98710? +

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: 3945: free EEPROM data on remove il3945_pci_probe() calls il_eeprom_init(), which allocates memory for the EEPROM data. The probe failure paths release this allocation with il_eeprom_free(), but the remove path does not free it after a successful probe. As a result, the EEPROM data is leaked when the PCI device is removed. Free the EEPROM data in il3945_pci_remove() before releasing the mac80211 hardware structure. This issue was found by manual code inspection.

How do I check if I'm vulnerable to CVE-2026-98710? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.