wifi: ipw2200: fix memory leak in ipw_wdev_init() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.25 % · percentile 16 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2200: fix memory leak in ipw_wdev_init() In the error path of ipw_wdev_init(), exception value is returned, and the memory applied for in the function is not released. Also the memory is not released in ipw_pci_probe(). As a result, memory leakage occurs. So memory release needs to be added to the error path of ipw_wdev_init().
References
- https://git.kernel.org/stable/c/75d20ba9506eb90d92e660e04dd887ff1495fcc3
- https://git.kernel.org/stable/c/fb3517b92a45c8004ac26250ae041a24eb23fef1
- https://git.kernel.org/stable/c/112c1af02b8f535baf42ef9d807aea963705ef15
- https://git.kernel.org/stable/c/8a2eb9d9d0c1535bc8e22840193bff4cdcac878b
- https://git.kernel.org/stable/c/9424ea9d557ef41d86eb40b6349ae991c3dcff89
- https://git.kernel.org/stable/c/62ec7e8bf42f1542f966dda687c654aae81718c8
- https://git.kernel.org/stable/c/1f590fb3d14e5db3a9e06ee141b1685c429278ce
- https://git.kernel.org/stable/c/9fe21dc626117fb44a8eb393713a86a620128ce3
European references
- ENISA EUVD · EUVD-2022-55745
- GCVE · GCVE-0-2022-50660
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected a3caa99e6c68f466c13cfea74097f6fb01b45e25 < 75d20ba9506eb90d92e660e04dd887ff1495fcc3 ; affected a3caa99e6c68f466c13cfea74097f6fb01b45e25 < fb3517b92a45c8004ac26250ae041a24eb23fef1 ; affected a3caa99e6c68f466c13cfea74097f6fb01b45e25 < 112c1af02b8f535baf42ef9d807aea963705ef15 ; affected a3caa99e6c68f466c13cfea74097f6fb01b45e25 < 8a2eb9d9d0c1535bc8e22840193bff4cdcac878b ; affected a3caa99e6c68f466c13cfea74097f6fb01b45e25 < 9424ea9d557ef41d86eb40b6349ae991c3dcff89 ; affected a3caa99e6c68f466c13cfea74097f6fb01b45e25 < 62ec7e8bf42f1542f966dda687c654aae81718c8 |
| Linux · Linux | affected 2.6.33 ; unaffected 0 < 2.6.33 ; unaffected 4.14.308 ≤ 4.14.* ; unaffected 4.19.276 ≤ 4.19.* ; unaffected 5.4.235 ≤ 5.4.* ; unaffected 5.10.173 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |