Skip to main content
← All vulnerabilities
CVE-2024-35828

wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.311, 5.4.273, 5.10.214, 5.15.153, 6.1.83, and 3 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() In the for statement of lbs_allocate_cmd_buffer(), if the allocation of cmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs to be freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 · fixed in 96481624fb5a6319079fb5059e46dbce43a90186; From 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 · fixed in bea9573c795acec5614d4ac2dcc7b3b684cea5bf; From 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 · fixed in f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7; From 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 · fixed in e888c4461e109f7b93c3522afcbbaa5a8fdf29d2; From 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 · fixed in 4d99d267da3415db2124029cb5a6d2d955ca43f9; From 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 · fixed in da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3; From 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 · fixed in d219724d4b0ddb8ec7dfeaed5989f23edabaf591; From 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 · fixed in 8e243ac649c10922a6b4855170eaefe4c5b3faab; From 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 · fixed in 5f0e4aede01cb01fa633171f0533affd25328c3a

  • Linux Linux

    2.6.22

  • KernelLinux

    From 2.6.22 · fixed in 4.19.311; From 4.20.0 · fixed in 5.4.273; From 5.5.0 · fixed in 5.10.214; From 5.11.0 · fixed in 5.15.153; From 5.16.0 · fixed in 6.1.83; From 6.2.0 · fixed in 6.6.23; From 6.7.0 · fixed in 6.7.11; From 6.8.0 · fixed in 6.8.2

References 9

git.kernel.org