CVE-2026-64145

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: wilc1000: fix dma_buffer leak on bus acquire failure<br /> <br /> wilc_wlan_firmware_download() allocates dma_buffer with kmalloc() at<br /> the top of the function and uses a &amp;#39;fail:&amp;#39; label to free it via<br /> kfree(dma_buffer) on error.<br /> <br /> All later error paths correctly use &amp;#39;goto fail&amp;#39; to route through this<br /> cleanup. However, the early failure path after the first acquire_bus()<br /> call uses a bare &amp;#39;return ret;&amp;#39;, which leaks dma_buffer whenever the bus<br /> acquire fails.<br /> <br /> Replace the early return with goto fail so the existing cleanup path<br /> runs.<br /> <br /> Found via a custom Coccinelle semantic patch hunting for kmalloc&amp;#39;d<br /> locals leaked on early-return error paths in driver firmware-download<br /> code.