In the Linux kernel, the following vulnerability has been resolved:
wifi: wfx: fix memory leak when starting AP
Kmemleak reported this error:
unreferenced object 0xd73d1180 (size 184): comm "wpa_supplicant", pid 1559, jiffies 13006305 (age 964.245s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 1e 00 01 00 00 00 00 00 ................ backtrace: [<5ca11420>] kmem_cache_alloc+0x20c/0x5ac [<127bdd74>] __alloc_skb+0x144/0x170 [<fb8a5e38>] __netdev_alloc_skb+0x50/0x180 [<0f9fa1d5>] __ieee80211_beacon_get+0x290/0x4d4 [mac80211] [<7accd02d>] ieee80211_beacon_get_tim+0x54/0x18c [mac80211] [<41e25cc3>] wfx_start_ap+0xc8/0x234 [wfx] [<93a70356>] ieee80211_start_ap+0x404/0x6b4 [mac80211] [<a4a661cd>] nl80211_start_ap+0x76c/0x9e0 [cfg80211] [<47bd8b68>] genl_rcv_msg+0x198/0x378 [<453ef796>] netlink_rcv_skb+0xd0/0x130 [<6b7c977a>] genl_rcv+0x34/0x44 [<66b2d04d>] netlink_unicast+0x1b4/0x258 [<f965b9b6>] netlink_sendmsg+0x1e8/0x428 [<aadb8231>] ____sys_sendmsg+0x1e0/0x274 [<d2b5212d>] ___sys_sendmsg+0x80/0xb4 [<69954f45>] __sys_sendmsg+0x64/0xa8 unreferenced object 0xce087000 (size 1024): comm "wpa_supplicant", pid 1559, jiffies 13006305 (age 964.246s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00 ...@............ backtrace: [<9a993714>] __kmalloc_track_caller+0x230/0x600 [<f83ea192>] kmalloc_reserve.constprop.0+0x30/0x74 [<a2c61343>] __alloc_skb+0xa0/0x170 [<fb8a5e38>] __netdev_alloc_skb+0x50/0x180 [<0f9fa1d5>] __ieee80211_beacon_get+0x290/0x4d4 [mac80211] [<7accd02d>] ieee80211_beacon_get_tim+0x54/0x18c [mac80211] [<41e25cc3>] wfx_start_ap+0xc8/0x234 [wfx] [<93a70356>] ieee80211_start_ap+0x404/0x6b4 [mac80211] [<a4a661cd>] nl80211_start_ap+0x76c/0x9e0 [cfg80211] [<47bd8b68>] genl_rcv_msg+0x198/0x378 [<453ef796>] netlink_rcv_skb+0xd0/0x130 [<6b7c977a>] genl_rcv+0x34/0x44 [<66b2d04d>] netlink_unicast+0x1b4/0x258 [<f965b9b6>] netlink_sendmsg+0x1e8/0x428 [<aadb8231>] ____sys_sendmsg+0x1e0/0x274 [<d2b5212d>] ___sys_sendmsg+0x80/0xb4
However, since the kernel is build optimized, it seems the stack is not accurate. It appears the issue is related to wfx_set_mfp_ap(). The issue is obvious in this function: memory allocated by ieee80211_beacon_get() is never released. Fixing this leak makes kmemleak happy.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-apmUpgrade dtb-amdUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade dtb-socionext | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fdeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1036-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-160-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1090-intel-iotgUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1095-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1094-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1089-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-fips-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-160-generic-lpaeUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1047-nvidia-tegraUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-160-fipsUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1078-gkeopUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1098-azure-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1087-intel-iot-realtimeUpgrade linux-image-5.15.0-1090-nvidiaUpgrade linux-image-5.15.0-1092-oracleUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1036-nvidia-tegra-igxUpgrade linux-image-5.15.0-1047-nvidia-tegra-rtUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-160-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1095-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1091-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1090-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-160-lowlatency-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-160-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1089-raspiUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1095-awsUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.15.0-1059-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1098-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1095-aws-64kUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1095-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-rt | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub