CVE-2024-35828

wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()

In the for statement of lbs_allocate_cmd_buffer(), if the allocation of
cmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs to
be freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: wifi: libertas: arreglados algunas memleaks en lbs_allocate_cmd_buffer() En la declaración for de lbs_allocate_cmd_buffer(), si falló la asignación de cmdarray[i].cmdbuf, tanto cmdarray como cmdarray[i] Es necesario liberar ].cmdbuf. De lo contrario, habrá fugas de memoria en lbs_allocate_cmd_buffer().

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-05-17 CVE Reserved
2024-05-17 CVE Published
2024-05-18 EPSS Updated
2024-08-02 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (12)

URL	Tag	Source
https://git.kernel.org/stable/c/876c9d3aeb989cf1961f2c228d309ba5dcfb1172	Vuln. Introduced
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/96481624fb5a6319079fb5059e46dbce43a90186	2024-03-26
https://git.kernel.org/stable/c/bea9573c795acec5614d4ac2dcc7b3b684cea5bf	2024-03-26
https://git.kernel.org/stable/c/f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7	2024-03-26
https://git.kernel.org/stable/c/e888c4461e109f7b93c3522afcbbaa5a8fdf29d2	2024-03-26
https://git.kernel.org/stable/c/4d99d267da3415db2124029cb5a6d2d955ca43f9	2024-03-26
https://git.kernel.org/stable/c/da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3	2024-03-26
https://git.kernel.org/stable/c/d219724d4b0ddb8ec7dfeaed5989f23edabaf591	2024-03-26
https://git.kernel.org/stable/c/8e243ac649c10922a6b4855170eaefe4c5b3faab	2024-03-26
https://git.kernel.org/stable/c/5f0e4aede01cb01fa633171f0533affd25328c3a	2024-02-05

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.22 < 4.19.311 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.22 < 4.19.311"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.22 < 5.4.273 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.22 < 5.4.273"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.22 < 5.10.214 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.22 < 5.10.214"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.22 < 5.15.153 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.22 < 5.15.153"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.22 < 6.1.83 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.22 < 6.1.83"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.22 < 6.6.23 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.22 < 6.6.23"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.22 < 6.7.11 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.22 < 6.7.11"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.22 < 6.8.2 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.22 < 6.8.2"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.22 < 6.9 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.22 < 6.9"		en		Affected