Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function It is stated that ath9k_htc_rx_msg() either frees the provided skb or passes its management to another callback function. However, the skb is not freed in case there is no another callback function, and Syzkaller was able to cause a memory leak. Also minor comment fix. Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
fb9987d0f748c983bb795a86f47522313f701a08 to < b11f95f65cc52ee3a756e6f6a88df37a203e25bdaffectedfb9987d0f748c983bb795a86f47522313f701a08 to < 68171c006c8645a3e0293a6c3e6037c6538ac1c5affectedfb9987d0f748c983bb795a86f47522313f701a08 to < 564bc2222bf50eb6cdee715a5431bf4dc9f923c1affectedfb9987d0f748c983bb795a86f47522313f701a08 to < ec246dfe006b2a8f36353f7489e4f525114db9a5affectedfb9987d0f748c983bb795a86f47522313f701a08 to < c0c0614f143b568cd0e9525d53cf12e5dcd11987affectedfb9987d0f748c983bb795a86f47522313f701a08 to < 5a84e51f72580fc70066b03f3dac38421e702a0baffectedfb9987d0f748c983bb795a86f47522313f701a08 to < bbfababb4f899fe1556eac195f9774b6fe675fb6affectedfb9987d0f748c983bb795a86f47522313f701a08 to < 9b25e3985477ac3f02eca5fc1e0cc6850a3f7e69affected
Linux Linux
Default version status: affected
2.6.35affected0 to < 2.6.35unaffected4.14.308 to ≤ 4.14.*unaffected4.19.276 to ≤ 4.19.*unaffected5.4.235 to ≤ 5.4.*unaffected5.10.173 to ≤ 5.10.*unaffected5.15.99 to ≤ 5.15.*unaffected6.1.16 to ≤ 6.1.*unaffected6.2.3 to ≤ 6.2.*unaffected6.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b11f95f65cc52ee3a756e6f6a88df37a203e25bd ↗
- https://git.kernel.org/stable/c/68171c006c8645a3e0293a6c3e6037c6538ac1c5 ↗
- https://git.kernel.org/stable/c/564bc2222bf50eb6cdee715a5431bf4dc9f923c1 ↗
- https://git.kernel.org/stable/c/ec246dfe006b2a8f36353f7489e4f525114db9a5 ↗
- https://git.kernel.org/stable/c/c0c0614f143b568cd0e9525d53cf12e5dcd11987 ↗
- https://git.kernel.org/stable/c/5a84e51f72580fc70066b03f3dac38421e702a0b ↗
- https://git.kernel.org/stable/c/bbfababb4f899fe1556eac195f9774b6fe675fb6 ↗
- https://git.kernel.org/stable/c/9b25e3985477ac3f02eca5fc1e0cc6850a3f7e69 ↗