CVE-2026-64145: In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dma_buffer leak on bus acquire
infovulnerability
security
Summary
A memory leak vulnerability exists in the Linux kernel's wilc1000 WiFi driver where a buffer allocated with kmalloc (a memory allocation function) is not properly freed when the bus acquire operation fails early in the firmware download process. The problem occurs because an early error path uses a direct return statement instead of going through the cleanup code that frees the buffer.
Solution / Mitigation
Replace the early return with 'goto fail' so the existing cleanup path runs and properly frees the dma_buffer via kfree(dma_buffer).
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Disclosure Date
July 19, 2026
Classification
Attack SophisticationTrivial
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64145
First tracked: July 19, 2026 at 02:09 PM
Classified by LLM (prompt v3) · confidence: 95%