Not yet scoredPublished Jan 5, 2026

CVE-2025-68759wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()

Updated under an hour ago (Oct 27, 2026, 1:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() In rtl8180_init_rx_ring(), memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations are not freed on exit. Fix that by jumping to err_free_rings label on error, which calls rtl8180_free_rx_ring() to free the allocations. Remove the free of rx_ring in rtl8180_init_rx_ring() error path, and set the freed priv->rx_buf entry to null, to avoid double free.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f653211197f3841f383fa9757ef8ce182c6cf627 before 3677c01891fb0239361e444afee8398868e34bdf; from f653211197f3841f383fa9757ef8ce182c6cf627 before 89caaeee8dd95fae8bb4f4964e6fe3ca688500c4; from f653211197f3841f383fa9757ef8ce182c6cf627 before a4fb7cca9837378878e6c94d9e7af019c8fdfcdb; from f653211197f3841f383fa9757ef8ce182c6cf627 before bf8513dfa31ea015c9cf415796dca2113d293840; from f653211197f3841f383fa9757ef8ce182c6cf627 before ee7db11742b30641f21306105ad27a275e3c61d7; from f653211197f3841f383fa9757ef8ce182c6cf627 before a813a74570212cb5f3a7d3b05c0cb0cd00bace1d; from f653211197f3841f383fa9757ef8ce182c6cf627 before c9d1c4152e6d32fa74034464854bee262a60bc43; from f653211197f3841f383fa9757ef8ce182c6cf627 before 9b5b9c042b30befc5b37e4539ace95af70843473	CNA record

References

References

https://git.kernel.org/stable/c/3677c01891fb0239361e444afee8398868e34bdf
https://git.kernel.org/stable/c/89caaeee8dd95fae8bb4f4964e6fe3ca688500c4
https://git.kernel.org/stable/c/a4fb7cca9837378878e6c94d9e7af019c8fdfcdb
https://git.kernel.org/stable/c/bf8513dfa31ea015c9cf415796dca2113d293840
https://git.kernel.org/stable/c/ee7db11742b30641f21306105ad27a275e3c61d7
https://git.kernel.org/stable/c/a813a74570212cb5f3a7d3b05c0cb0cd00bace1d
https://git.kernel.org/stable/c/c9d1c4152e6d32fa74034464854bee262a60bc43
https://git.kernel.org/stable/c/9b5b9c042b30befc5b37e4539ace95af70843473

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.