CVE-2026-98710 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution vendors, and users of Linux-based systems with iwlegacy 3945 devices should be aware of this vulnerability. They should verify and apply patches, review device removal procedures, and monitor systems for potential memory leaks. The vulnerability affects the Linux kernel's iwlegacy 3945 driver, and operators, platforms, vulnerability-management, and security teams should take necessary actions to

Why it matters

CVE-2026-98710 is a vulnerability in the Linux kernel's iwlegacy 3945 driver that leads to a memory leak on device removal. Defenders should verify and apply patches, review device removal procedures, and monitor systems for potential memory leaks.

• Memory leak on device removal may lead to increased memory usage
• Potential for denial-of-service (DoS) due to memory exhaustion

Technical summary

The Linux kernel's iwlegacy 3945 driver does not free EEPROM data on device removal, leading to a memory leak. This issue was resolved by adding a call to il_eeprom_free() in the il3945_pci_remove() function. The vulnerability was identified through manual code inspection. Defenders should verify and apply patches to prevent potential memory leaks. The affected product context is the Linux kernel's iwlegacy 3945 driver, and the defensive impact is to prevent memory leaks on device removal. The source-grounded technical framing is based on the CVE record and source references.

Defensive priority

Verify and apply patch for Linux kernel iwlegacy 3945 EEPROM data leak

Recommended defensive actions

• Verify Linux kernel version and apply patch for iwlegacy 3945
• Review device removal procedures to ensure EEPROM data is properly freed
• Monitor system for potential memory leaks
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance

Evidence notes

The CVE record and source references indicate a vulnerability in the Linux kernel's iwlegacy 3945 driver, where EEPROM data is not freed on device removal, leading to a memory leak. This issue was identified through manual code inspection. The il3945_pci_probe() function calls il_eeprom_init(), which allocates memory for the EEPROM data. However, the remove path does not free this memory after a successful probe. Defenders should verify the patch and review device removal procedures to ensure EEPROM data is properly freed.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.