Medium 5.5Published Jul 19, 2026

CVE-2026-64179net: wwan: iosm: fix potential memory leaks in ipc_imem_init()

Updated under an hour ago (Oct 27, 2026, 11:00 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() The memory allocated in ipc_protocol_init() is not freed on the error paths that follow in ipc_imem_init(). Fix that by calling the corresponding release function ipc_protocol_deinit() in the error path.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jul 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 3670970dd8c661c10c10c300d726f59428eaad32 before f1a4d57847813fae42fbb7eb35f2dd48b9cff8a9; from 3670970dd8c661c10c10c300d726f59428eaad32 before ba6d8643019c33428f7c0658863e80e0b04a70f4; 3670970dd8c661c10c10c300d726f59428eaad32 builds before 6f63a60580ebdd9a1f22f89a84814d1fefe16b1c; 3670970dd8c661c10c10c300d726f59428eaad32 builds before 583fd5a8fc797c8ecf2e1a7b923740c5e5734e85; from 3670970dd8c661c10c10c300d726f59428eaad32 before ffb6dbb49c96be82f07c7b112e3ebc3e6fdd8dd5; 3670970dd8c661c10c10c300d726f59428eaad32 builds before 8f764a7810a9f114313c439d25b11f4417c6e0dd; from 3670970dd8c661c10c10c300d726f59428eaad32 before c5d93b2c40355e999715262a824965aac025a427	CNA record
linux linux_kernel linux:linux_kernel	from 5.14 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.142; from 6.7 before 6.12.92; from 6.13 before 6.18.34; from 6.19 before 7.0.11; 7.1; 7.1; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/f1a4d57847813fae42fbb7eb35f2dd48b9cff8a9	patch
https://git.kernel.org/stable/c/ba6d8643019c33428f7c0658863e80e0b04a70f4	patch
https://git.kernel.org/stable/c/6f63a60580ebdd9a1f22f89a84814d1fefe16b1c	patch
https://git.kernel.org/stable/c/583fd5a8fc797c8ecf2e1a7b923740c5e5734e85	patch
https://git.kernel.org/stable/c/ffb6dbb49c96be82f07c7b112e3ebc3e6fdd8dd5	patch
https://git.kernel.org/stable/c/8f764a7810a9f114313c439d25b11f4417c6e0dd	patch
https://git.kernel.org/stable/c/c5d93b2c40355e999715262a824965aac025a427	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.