Description
In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred Similar to the handling of play_deferred in commit 19cfe912c37b ("Bluetooth: btusb: Fix memory leak in play_deferred"), we thought a patch might be needed here as well. Currently usb_submit_urb is called directly to submit deferred tx urbs after unanchor them. So the usb_giveback_urb_bh would failed to unref it in usb_unanchor_urb and cause memory leak. Put those urbs in tx_anchor to avoid the leak, and also fix the error handling.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to < 1eb0afecfb9cd0f38424b82bd9aaa542310934eeaffectedf26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to < f21f908347712b8288ffe83b531b5e977042b29caffectedf26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to < 3e7c7df6991ac349f2fa8540047757df666e610faffectedf26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to < 6b4d8b44e7163a77fe942f5b80e1651c1b78c537affectedf26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to < 0eeec1a8b0cd38c47edeb042980a6aeacecf35edaffectedf26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to < 6616872cfe7f0474a22dd1f12699f95bcf81a54daffectedf26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to < 3eadc560c1919b8193d17334145dad9a917960e4affectedf26e30cc6b50ba81e30ca3016c29ad4b48b93eaa to < 8a4d480702b71184fabcf379b80bf7539716752eaffected
Linux Linux
Default version status: affected
3.14affected0 to < 3.14unaffected4.9.320 to ≤ 4.9.*unaffected4.14.285 to ≤ 4.14.*unaffected4.19.249 to ≤ 4.19.*unaffected5.4.200 to ≤ 5.4.*unaffected5.10.124 to ≤ 5.10.*unaffected5.15.49 to ≤ 5.15.*unaffected5.18.6 to ≤ 5.18.*unaffected5.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1eb0afecfb9cd0f38424b82bd9aaa542310934ee ↗
- https://git.kernel.org/stable/c/f21f908347712b8288ffe83b531b5e977042b29c ↗
- https://git.kernel.org/stable/c/3e7c7df6991ac349f2fa8540047757df666e610f ↗
- https://git.kernel.org/stable/c/6b4d8b44e7163a77fe942f5b80e1651c1b78c537 ↗
- https://git.kernel.org/stable/c/0eeec1a8b0cd38c47edeb042980a6aeacecf35ed ↗
- https://git.kernel.org/stable/c/6616872cfe7f0474a22dd1f12699f95bcf81a54d ↗
- https://git.kernel.org/stable/c/3eadc560c1919b8193d17334145dad9a917960e4 ↗
- https://git.kernel.org/stable/c/8a4d480702b71184fabcf379b80bf7539716752e ↗