wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.19 % · percentile 9 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function It is stated that ath9k_htc_rx_msg() either frees the provided skb or passes its management to another callback function. However, the skb is not freed in case there is no another callback function, and Syzkaller was able to cause a memory leak. Also minor comment fix. Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
References
- https://git.kernel.org/stable/c/b11f95f65cc52ee3a756e6f6a88df37a203e25bd
- https://git.kernel.org/stable/c/68171c006c8645a3e0293a6c3e6037c6538ac1c5
- https://git.kernel.org/stable/c/564bc2222bf50eb6cdee715a5431bf4dc9f923c1
- https://git.kernel.org/stable/c/ec246dfe006b2a8f36353f7489e4f525114db9a5
- https://git.kernel.org/stable/c/c0c0614f143b568cd0e9525d53cf12e5dcd11987
- https://git.kernel.org/stable/c/5a84e51f72580fc70066b03f3dac38421e702a0b
- https://git.kernel.org/stable/c/bbfababb4f899fe1556eac195f9774b6fe675fb6
- https://git.kernel.org/stable/c/9b25e3985477ac3f02eca5fc1e0cc6850a3f7e69
European references
- ENISA EUVD · EUVD-2023-60104
- GCVE · GCVE-0-2023-53802
CERT-FR advisories
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected fb9987d0f748c983bb795a86f47522313f701a08 < b11f95f65cc52ee3a756e6f6a88df37a203e25bd ; affected fb9987d0f748c983bb795a86f47522313f701a08 < 68171c006c8645a3e0293a6c3e6037c6538ac1c5 ; affected fb9987d0f748c983bb795a86f47522313f701a08 < 564bc2222bf50eb6cdee715a5431bf4dc9f923c1 ; affected fb9987d0f748c983bb795a86f47522313f701a08 < ec246dfe006b2a8f36353f7489e4f525114db9a5 ; affected fb9987d0f748c983bb795a86f47522313f701a08 < c0c0614f143b568cd0e9525d53cf12e5dcd11987 ; affected fb9987d0f748c983bb795a86f47522313f701a08 < 5a84e51f72580fc70066b03f3dac38421e702a0b |
| Linux · Linux | affected 2.6.35 ; unaffected 0 < 2.6.35 ; unaffected 4.14.308 ≤ 4.14.* ; unaffected 4.19.276 ≤ 4.19.* ; unaffected 5.4.235 ≤ 5.4.* ; unaffected 5.10.173 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |