Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50186

ath11k: fix missing skb drop on htc_tx_completion error

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ath11k: fix missing skb drop on htc_tx_completion error On htc_tx_completion error the skb is not dropped. This is wrong since the completion_handler logic expect the skb to be consumed anyway even when an error is triggered. Not freeing the skb on error is a memory leak since the skb won't be freed anywere else. Correctly free the packet on eid >= ATH11K_HTC_EP_COUNT before returning. Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f951380a6022440335f668f85296096ba13071ba to < dda25326839d6e6b1fe59e79616149e44ea4eaa4affected
  • f951380a6022440335f668f85296096ba13071ba to < 1f1483361585ae7556492f50f83f038bbdf8c294affected
  • f951380a6022440335f668f85296096ba13071ba to < e5646fe3b7ef739c392e59da7db6adf5e1fdef42affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 5.18.18 to ≤ 5.18.*unaffected
  • 5.19.2 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References