CVE-2026-64179

net: wwan: iosm: fix potential memory leaks in ipc_imem_init()

MEDIUM
5.5
CVSS Score
Published: July 19, 2026 at 03:41 PM UTC
Updated: August 12, 2026 at 03:48 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() The memory allocated in ipc_protocol_init() is not freed on the error paths that follow in ipc_imem_init(). Fix that by calling the corresponding release function ipc_protocol_deinit() in the error path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.14 ≤ v < 5.15.2095.14 ≤ v < 6.1.1755.14 ≤ v < 6.12.925.14 ≤ v < 6.18.345.14 ≤ v < 6.6.1425.14 ≤ v < 7.0.115.14 ≤ v < 7.15.16 ≤ v < 6.1.1756.13 ≤ v < 6.18.346.19 ≤ v < 7.0.116.2 ≤ v < 6.6.1426.7 ≤ v < 6.12.923670970dd8c661c10c10c300d726f59428eaad327.1 rc17.1 rc27.1 rc37.1 rc4
Vendor states this is fixed in 583fd5a8fc797c8ecf2e1a7b923740c5e5734e85 (fixed)
Vendor states this is fixed in 6f63a60580ebdd9a1f22f89a84814d1fefe16b1c (fixed)
Vendor states this is fixed in 8f764a7810a9f114313c439d25b11f4417c6e0dd (fixed)
Vendor states this is fixed in ba6d8643019c33428f7c0658863e80e0b04a70f4 (fixed)
Vendor states this is fixed in c5d93b2c40355e999715262a824965aac025a427 (fixed)
Vendor states this is fixed in f1a4d57847813fae42fbb7eb35f2dd48b9cff8a9 (fixed)
Vendor states this is fixed in ffb6dbb49c96be82f07c7b112e3ebc3e6fdd8dd5 (fixed)
Vendor states this is fixed in 5.14 (unaffected)
Vendor states this is fixed in 5.15.209 (unaffected)
Vendor states this is fixed in 6.1.175 (unaffected)
Vendor states this is fixed in 6.12.92 (unaffected)
Vendor states this is fixed in 6.18.34 (unaffected)
Vendor states this is fixed in 6.6.142 (unaffected)
Vendor states this is fixed in 7.0.11 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card