CVE-2026-64145CWE-787

CVE-2026-64145

High · published July 19, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: wilc1000: fix dma_buffer leak on bus acquire failure

wilc_wlan_firmware_download() allocates dma_buffer with kmalloc() at

the top of the function and uses a 'fail:' label to free it via

kfree(dma_buffer) on error.

All later error paths correctly use 'goto fail' to route through this

cleanup. However, the early failure path after the first acquire_bus()

call uses a bare 'return ret;', which leaks dma_buffer whenever the bus

acquire fails.

Replace the early return with goto fail so the existing cleanup path

runs.

Found via a custom Coccinelle semantic patch hunting for kmalloc'd

locals leaked on early-return error paths in driver firmware-download

code.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-07-19T20:17Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 6.13, < 6.18.346.18.34
linux/linux_kernel≥ 6.19, < 7.0.117.0.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 19 JUL 15:40Z
    wifi: wilc1000: fix dma_buffer leak on bus acquire failure
    cvelistv5