CVE-2026-68413

A flaw was found in the ipw2100 wireless driver in the Linux kernel. Insufficient error handling in the ipw2100_pci_init_one() function can lead to a memory leak. This occurs because memory allocated by ipw2100_alloc_device() is not properly released in specific error scenarios, potentially allowing a local attacker to cause a denial of service due to resource exhaustion.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the ipw2100 kernel module from being loaded:

1. Disable module autoloading by creating a configuration file in /etc/modprobe.d/: echo "install ipw2100 /bin/true" > /etc/modprobe.d/ipw2100.conf

2. Unload the module if it is currently loaded: modprobe -r ipw2100

Caveat: Disabling this module prevents the kernel from operating Intel PRO/Wireless 2100 network adapters. Warning: If the module is actively in use or cannot be unloaded dynamically, a system restart may be required to enforce the configuration.