CVE-2025-71273CWE-401

CVE-2025-71273

Medium · published May 6, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()

Simplify the code by using device managed memory allocations.

This also fixes a memory leak in rtw_register_hw(). The supported bands

were not freed in the error path.

Copied from commit 145df52a8671 ("wifi: rtw89: Convert

rtw89_core_set_supported_band to use devm_*").

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00122 · 1.8th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-05-06T16:16Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.2, < 6.12.756.12.75
linux/linux_kernel≥ 6.13, < 6.18.166.18.16
linux/linux_kernel≥ 6.19, < 6.19.66.19.6
References (5)
https://git.kernel.org/stable/c/1bd90e0a99fdc8dc5deb3c92bf865e4496b4b311 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2ba12401cc1f2d970fa2e7d5b15abde3f5abd40d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9b5418070ee8468fac9e8bf641c83d46b85bff30 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ad9b80ee310ed734482a2e5da874b67f88ac0ef8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d57e31c8df7b8bb684c6b56854676972a8b7c8ed · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 06 MAY 11:27Z
    wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()
    cvelistv5