Headline
CVE-2019-19057: mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring · torvalds/linux@d10dcb6
Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.
Permalink
Browse files
mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
In mwifiex_pcie_init_evt_ring, a new skb is allocated which should be released if mwifiex_map_pci_memory() fails. The release for skb and card->evtbd_ring_vbase is added.
Fixes: 0732484 (“mwifiex: separate ring initialization and ring creation routines”) Signed-off-by: Navid Emamdoost [email protected] Acked-by: Ganapathi Bhat [email protected] Signed-off-by: Kalle Valo [email protected]
- Loading branch information
Related news
Dell EMC Metro node, Version(s) prior to 7.1, contain a Code Injection Vulnerability. An authenticated nonprivileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application.