CVE-2024-50236

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath10k: Fix memory leak in management tx

In the current logic, memory is allocated for storing the MSDU context

during management packet TX but this memory is not being freed during

management TX completion. Similar leaks are seen in the management TX

cleanup logic.

Kmemleak reports this problem as below,

unreferenced object 0xffffff80b64ed250 (size 16):

comm "kworker/u16:7", pid 148, jiffies 4294687130 (age 714.199s)

hex dump (first 16 bytes):

00 2b d8 d8 80 ff ff ff c4 74 e9 fd 07 00 00 00 .+.......t......

backtrace:

[<ffffffe6e7b245dc>] __kmem_cache_alloc_node+0x1e4/0x2d8

[<ffffffe6e7adde88>] kmalloc_trace+0x48/0x110

[<ffffffe6bbd765fc>] ath10k_wmi_tlv_op_gen_mgmt_tx_send+0xd4/0x1d8 [ath10k_core]

[<ffffffe6bbd3eed4>] ath10k_mgmt_over_wmi_tx_work+0x134/0x298 [ath10k_core]

[<ffffffe6e78d5974>] process_scheduled_works+0x1ac/0x400

[<ffffffe6e78d60b8>] worker_thread+0x208/0x32

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References