Description
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in helper_firmware_cb() helper_firmware_cb() neglects to free the single-stage firmware image after a successful async load, leading to a memory leak in the USB firmware-download path. Fix this memory leak by calling release_firmware() immediately after lbs_fw_loaded() returns. The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in the current wireless tree. An x86_64 allyesconfig build showed no new warnings. As we do not have compatible Libertas USB hardware for exercising this firmware-download path, no runtime testing was able to be performed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1dfba3060fe7ee03ccec25a91d35085142dfc295 to < 6c1f54a04813676c5a2150d99331c8d21f199374affected1dfba3060fe7ee03ccec25a91d35085142dfc295 to < 7f28722b3e4e0c8d49c859fea4a9b1fa13b5ae06affected1dfba3060fe7ee03ccec25a91d35085142dfc295 to < ce829286f4935f1eb6b5dcb64da02910ce149c76affected1dfba3060fe7ee03ccec25a91d35085142dfc295 to < d497b7566e74920acfe283dd6b2cbf1682890796affected1dfba3060fe7ee03ccec25a91d35085142dfc295 to < eaeb1d74a47fc4864f2c754c0b9d654a9b7dc55caffected1dfba3060fe7ee03ccec25a91d35085142dfc295 to < 6cda91bbb8dc3d22ef0323008a12dcf73a5129daaffected1dfba3060fe7ee03ccec25a91d35085142dfc295 to < 644640cde2fb216e6567de5eee780a38dbc95928affected1dfba3060fe7ee03ccec25a91d35085142dfc295 to < 63c2391deefb31e1b801b7f32bd502ca4808639baffected
Linux Linux
Default version status: affected
3.13affected0 to < 3.13unaffected5.10.265 to ≤ 5.10.*unaffected5.15.216 to ≤ 5.15.*unaffected6.1.183 to ≤ 6.1.*unaffected6.6.148 to ≤ 6.6.*unaffected6.12.101 to ≤ 6.12.*unaffected6.18.42 to ≤ 6.18.*unaffected7.1.6 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/6c1f54a04813676c5a2150d99331c8d21f199374 ↗
- https://git.kernel.org/stable/c/7f28722b3e4e0c8d49c859fea4a9b1fa13b5ae06 ↗
- https://git.kernel.org/stable/c/ce829286f4935f1eb6b5dcb64da02910ce149c76 ↗
- https://git.kernel.org/stable/c/d497b7566e74920acfe283dd6b2cbf1682890796 ↗
- https://git.kernel.org/stable/c/eaeb1d74a47fc4864f2c754c0b9d654a9b7dc55c ↗
- https://git.kernel.org/stable/c/6cda91bbb8dc3d22ef0323008a12dcf73a5129da ↗
- https://git.kernel.org/stable/c/644640cde2fb216e6567de5eee780a38dbc95928 ↗
- https://git.kernel.org/stable/c/63c2391deefb31e1b801b7f32bd502ca4808639b ↗