wifi: ath11k: fix memory leaks in beacon template setup
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.109, 6.18.50, 7.0.10
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leaks in beacon template setup The functions ath11k_mac_setup_bcn_tmpl_ema() and ath11k_mac_setup_bcn_tmpl_mbssid() allocate memory for beacon templates but fail to free it when parameter setup returns an error. Since beacon templates must be released during normal execution, they must also be released in the error handling paths to prevent memory leaks. Fix this by using unified exit paths with proper cleanup in the respective error paths. Compile tested only. Issue found using a prototype static analysis tool and code review.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 335a92765d308dfe22826f5562cd4b4389b45e71 · fixed in 7bedc489611f01634cec20f88f961a1f08e8d935; From 335a92765d308dfe22826f5562cd4b4389b45e71 · fixed in 9478aa5b39e986d45fafe279c24d3546783c22b1; From 335a92765d308dfe22826f5562cd4b4389b45e71 · fixed in 5fc3d921512d31839227a2d22a2990de02acefeb; From 335a92765d308dfe22826f5562cd4b4389b45e71 · fixed in 5d63aa38d5ca85206d9699ffdd616b58780dba07; From 335a92765d308dfe22826f5562cd4b4389b45e71 · fixed in ff49eba595df500e4ddccc593088c8a4ab5f2c27
- Linux Linux
6.5
- KernelLinux
From 6.5.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.109; From 6.13.0 · fixed in 6.18.50; From 6.19.0 · fixed in 7.0.10