---
id: CVE-2026-68413
title: 'wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()

  The memory allocated in the ipw2100_alloc_device() function is not freed
  in some of the error paths …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 2c86c275015c880e810830304a3a4ab94803b38b <
    71614326ab43e8b8f392ba865aeb6d7e327dff7d
  - >-
    Linux >= 2c86c275015c880e810830304a3a4ab94803b38b <
    9b080198a22fd809c4e7f6793eafab53ac2643fd
  - >-
    Linux >= 2c86c275015c880e810830304a3a4ab94803b38b <
    768a701362a8f77b62c14f8202ad559b7ecbb0c6
  - >-
    Linux >= 2c86c275015c880e810830304a3a4ab94803b38b <
    f75b9a2a9d8334ae0f9c5e47df7b31f7aeb1fdbe
  - >-
    Linux >= 2c86c275015c880e810830304a3a4ab94803b38b <
    836a19c654dcb1b01878a70090af016fbd0fd7e5
  - >-
    Linux >= 2c86c275015c880e810830304a3a4ab94803b38b <
    f442e581a88937671a22ceb3806c186265ef6254
  - >-
    Linux >= 2c86c275015c880e810830304a3a4ab94803b38b <
    7cbda50eebcd9aa00b0de382f776287cf7a36cf8
  - >-
    Linux >= 2c86c275015c880e810830304a3a4ab94803b38b <
    0d388f62031dbabcba0f44bb91b59f10e88cac17
  - Linux 2.6.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:48:59.286074Z'
published: '2026-08-10'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:15.949Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-68413'
references:
  - url: 'https://git.kernel.org/stable/c/71614326ab43e8b8f392ba865aeb6d7e327dff7d'
  - url: 'https://git.kernel.org/stable/c/9b080198a22fd809c4e7f6793eafab53ac2643fd'
  - url: 'https://git.kernel.org/stable/c/768a701362a8f77b62c14f8202ad559b7ecbb0c6'
  - url: 'https://git.kernel.org/stable/c/f75b9a2a9d8334ae0f9c5e47df7b31f7aeb1fdbe'
  - url: 'https://git.kernel.org/stable/c/836a19c654dcb1b01878a70090af016fbd0fd7e5'
  - url: 'https://git.kernel.org/stable/c/f442e581a88937671a22ceb3806c186265ef6254'
  - url: 'https://git.kernel.org/stable/c/7cbda50eebcd9aa00b0de382f776287cf7a36cf8'
  - url: 'https://git.kernel.org/stable/c/0d388f62031dbabcba0f44bb91b59f10e88cac17'
tags:
  - cve.org
epss: 0.00201
epssPercentile: 0.10121
ingestedAt: '2026-11-06T18:00:12.604Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()

The memory allocated in the ipw2100_alloc_device() function is not freed
in some of the error paths in ipw2100_pci_init_one(). Fix that by
converting the direct return into a goto to the error path return.

The error path when pci_enable_device() fails cannot jump to fail, since
at this point priv is not set, so perform error handling inline.

## Affected

- `Linux >= 2c86c275015c880e810830304a3a4ab94803b38b < 71614326ab43e8b8f392ba865aeb6d7e327dff7d`
- `Linux >= 2c86c275015c880e810830304a3a4ab94803b38b < 9b080198a22fd809c4e7f6793eafab53ac2643fd`
- `Linux >= 2c86c275015c880e810830304a3a4ab94803b38b < 768a701362a8f77b62c14f8202ad559b7ecbb0c6`
- `Linux >= 2c86c275015c880e810830304a3a4ab94803b38b < f75b9a2a9d8334ae0f9c5e47df7b31f7aeb1fdbe`
- `Linux >= 2c86c275015c880e810830304a3a4ab94803b38b < 836a19c654dcb1b01878a70090af016fbd0fd7e5`
- `Linux >= 2c86c275015c880e810830304a3a4ab94803b38b < f442e581a88937671a22ceb3806c186265ef6254`
- `Linux >= 2c86c275015c880e810830304a3a4ab94803b38b < 7cbda50eebcd9aa00b0de382f776287cf7a36cf8`
- `Linux >= 2c86c275015c880e810830304a3a4ab94803b38b < 0d388f62031dbabcba0f44bb91b59f10e88cac17`
- `Linux 2.6.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.