Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: 3945: free EEPROM data on remove il3945_pci_probe() calls il_eeprom_init(), which allocates memory for the EEPROM data. The probe failure paths release this allocation with il_eeprom_free(), but the remove path does not free it after a successful probe. As a result, the EEPROM data is leaked when the PCI device is removed. Free the EEPROM data in il3945_pci_remove() before releasing the mac80211 hardware structure. This issue was found by manual code inspection.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to < 3ebc529726c0c038f49e513a7a6f1893552ee803affected073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to < ab7bee2cd55f665cb29fa0ace2ec14020e0a452eaffected073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to < cd8f8f45d81aac384311701d7ffe26567af2e783affected073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to < 89f9d6186dc7429f38132635526e28549c913c0baffected073d3f5f1b3b6512eb82a3d40c84dedb14dc6f73 to < f8ebe286394c0bbb4a6dbacb182a34ab6376922daffected
Linux Linux
Default version status: affected
2.6.27affected0 to < 2.6.27unaffected6.6.160 to ≤ 6.6.*unaffected6.12.113 to ≤ 6.12.*unaffected6.18.56 to ≤ 6.18.*unaffected7.2.10 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3ebc529726c0c038f49e513a7a6f1893552ee803 ↗
- https://git.kernel.org/stable/c/ab7bee2cd55f665cb29fa0ace2ec14020e0a452e ↗
- https://git.kernel.org/stable/c/cd8f8f45d81aac384311701d7ffe26567af2e783 ↗
- https://git.kernel.org/stable/c/89f9d6186dc7429f38132635526e28549c913c0b ↗
- https://git.kernel.org/stable/c/f8ebe286394c0bbb4a6dbacb182a34ab6376922d ↗