Vulnerability · Published Sep 11, 2026 · Assigned by Linux

CVE-2026-80948wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 85.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() In iwl_op_mode_dvm_start(), jumping to out_free_eeprom currently bypasses the out_free_eeprom_blob label. Consequently, error paths triggered after successfully parsing the EEPROM free priv->nvm_data but leak priv->eeprom_blob. Fix this memory leak by reordering the error handling labels so that out_free_eeprom falls through to out_free_eeprom_blob. The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc6. An x86_64 allyesconfig build showed no new warnings. As we do not have supported Intel DVM wireless hardware and firmware to test with, no runtime testing was able to be performed.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-80948
Debian:13linux6.12.115-2DEBIAN-CVE-2026-80948
Debian:14linux7.2.6-1DEBIAN-CVE-2026-80948
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-80948
Ubuntu:26.04:LTSlinux-riscv7.0.0-42.42.1UBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-42.42.1~24.04.1UBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-80948
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-80948
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-80948

Affected products (as reported)

VendorProductVersions
Linux Linux 26a7ca9a71a3f7e1826de96b1a1e907123e11b07 – before 0540361ac82095b25e6eebd70b1df37d2faf45bd26a7ca9a71a3f7e1826de96b1a1e907123e11b07 – before 7be73911d979bb0f54485c2292043a5703fdc95326a7ca9a71a3f7e1826de96b1a1e907123e11b07 – before 2d593f32efa9ff1c91c508f45eb709c03dfb494526a7ca9a71a3f7e1826de96b1a1e907123e11b07 – before 84ba017a1e1ea7896ed1e3258c947bdbfc5299c526a7ca9a71a3f7e1826de96b1a1e907123e11b07 – before ad2a9fdca4a7100472be82ee6048c616fc58972026a7ca9a71a3f7e1826de96b1a1e907123e11b07 – before 67105abd6195a685a84dcb8a5daf54a1f4bfdb60
Linux Linux 3.6

References