The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
wifi: wfx: fix memory leak when starting AP
Kmemleak reported this error:
unreferenced object 0xd73d1180 (size 184): comm "wpa_supplicant", pid 1559, jiffies 13006305 (age 964.245s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 1e 00 01 00 00 00 00 00 ................ backtrace: [<5ca11420>] kmem_cache_alloc+0x20c/0x5ac [<127bdd74>] __alloc_skb+0x144/0x170 [<fb8a5e38>] __netdev_alloc_skb+0x50/0x180 [<0f9fa1d5>] __ieee80211_beacon_get+0x290/0x4d4 [mac80211] [<7accd02d>] ieee80211_beacon_get_tim+0x54/0x18c [mac80211] [<41e25cc3>] wfx_start_ap+0xc8/0x234 [wfx] [<93a70356>] ieee80211_start_ap+0x404/0x6b4 [mac80211] [<a4a661cd>] nl80211_start_ap+0x76c/0x9e0 [cfg80211] [<47bd8b68>] genl_rcv_msg+0x198/0x378 [<453ef796>] netlink_rcv_skb+0xd0/0x130 [<6b7c977a>] genl_rcv+0x34/0x44 [<66b2d04d>] netlink_unicast+0x1b4/0x258 [<f965b9b6>] netlink_sendmsg+0x1e8/0x428 [<aadb8231>] ____sys_sendmsg+0x1e0/0x274 [<d2b5212d>] ___sys_sendmsg+0x80/0xb4 [<69954f45>] __sys_sendmsg+0x64/0xa8 unreferenced object 0xce087000 (size 1024): comm "wpa_supplicant", pid 1559, jiffies 13006305 (age 964.246s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00 ...@............ backtrace: [<9a993714>] __kmalloc_track_caller+0x230/0x600 [<f83ea192>] kmalloc_reserve.constprop.0+0x30/0x74 [<a2c61343>] __alloc_skb+0xa0/0x170 [<fb8a5e38>] __netdev_alloc_skb+0x50/0x180 [<0f9fa1d5>] __ieee80211_beacon_get+0x290/0x4d4 [mac80211] [<7accd02d>] ieee80211_beacon_get_tim+0x54/0x18c [mac80211] [<41e25cc3>] wfx_start_ap+0xc8/0x234 [wfx] [<93a70356>] ieee80211_start_ap+0x404/0x6b4 [mac80211] [<a4a661cd>] nl80211_start_ap+0x76c/0x9e0 [cfg80211] [<47bd8b68>] genl_rcv_msg+0x198/0x378 [<453ef796>] netlink_rcv_skb+0xd0/0x130 [<6b7c977a>] genl_rcv+0x34/0x44 [<66b2d04d>] netlink_unicast+0x1b4/0x258 [<f965b9b6>] netlink_sendmsg+0x1e8/0x428 [<aadb8231>] ____sys_sendmsg+0x1e0/0x274 [<d2b5212d>] ___sys_sendmsg+0x80/0xb4
However, since the kernel is build optimized, it seems the stack is not accurate. It appears the issue is related to wfx_set_mfp_ap(). The issue is obvious in this function: memory allocated by ieee80211_beacon_get() is never released. Fixing this leak makes kmemleak happy.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-source-rt | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-1047-nvidia-tegra-rtUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1036-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1095-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1090-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1090-nvidia-lowlatencyUpgrade linux-image-5.15.0-1091-gkeUpgrade linux-image-5.15.0-1095-aws-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtualUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1092-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1089-raspiUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-160-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1087-intel-iot-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-160-genericUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-160-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1098-azureUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-160-generic-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-1098-azure-fipsUpgrade linux-image-5.15.0-1078-gkeopUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1059-xilinx-zynqmpUpgrade linux-image-lowlatency-5.15Upgrade linux-image-genericUpgrade linux-image-5.15.0-160-generic-lpaeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1089-ibmUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1090-intel-iotgUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1094-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1095-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1047-nvidia-tegraUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-intelUpgrade linux-image-generic-5.15Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1036-nvidia-tegra-igx-rtUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-160-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1095-aws-64kUpgrade linux-image-5.15.0-1095-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub