In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: fix potential memory leak in brcmfnetdevstart_xmit()
The brcmfnetdevstartxmit() returns NETDEVTXOK without freeing skb in case of pskbexpandhead() fails, add devkfree_skb() to fix it. Compile tested only.
[
{
"id": "CVE-2022-50321-337ad512",
"digest": {
"line_hashes": [
"294986491196470292562320262573730752227",
"240894959610994704407786838678725803824",
"16820978370769166391030074567769035397",
"117570941756750179619975045040380769302"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c55fdebc1c358de96bfab52ed309d58a3ba66ef",
"signature_type": "Line"
},
{
"id": "CVE-2022-50321-3da3a207",
"digest": {
"line_hashes": [
"294986491196470292562320262573730752227",
"240894959610994704407786838678725803824",
"16820978370769166391030074567769035397",
"117570941756750179619975045040380769302"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5d01e85cf46628647cd696cb72ba4659b18967f",
"signature_type": "Line"
},
{
"id": "CVE-2022-50321-5ad8a7a0",
"digest": {
"line_hashes": [
"266673272822388801838388202827867093144",
"11351392327892711796409198262358387106",
"16820978370769166391030074567769035397",
"117570941756750179619975045040380769302"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8ef89e5b89ee041a94eecfb6c31fcc237f9168c",
"signature_type": "Line"
},
{
"id": "CVE-2022-50321-6b071f58",
"digest": {
"function_hash": "140040847079939884820646943759561656783",
"length": 1634.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "brcmf_netdev_start_xmit",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5d01e85cf46628647cd696cb72ba4659b18967f",
"signature_type": "Function"
},
{
"id": "CVE-2022-50321-74760872",
"digest": {
"line_hashes": [
"266673272822388801838388202827867093144",
"11351392327892711796409198262358387106",
"16820978370769166391030074567769035397",
"117570941756750179619975045040380769302"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f159116d620615779adbf88a5d94713702216d8",
"signature_type": "Line"
},
{
"id": "CVE-2022-50321-7b13b62a",
"digest": {
"function_hash": "309135490343234511390266333140604452772",
"length": 1525.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "brcmf_netdev_start_xmit",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c55fdebc1c358de96bfab52ed309d58a3ba66ef",
"signature_type": "Function"
},
{
"id": "CVE-2022-50321-7df0614a",
"digest": {
"function_hash": "80889604157656729587718068979046358556",
"length": 1646.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "brcmf_netdev_start_xmit",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d869a189505224601e310c7769cb90b0e2f60b31",
"signature_type": "Function"
},
{
"id": "CVE-2022-50321-8eda7161",
"digest": {
"line_hashes": [
"266673272822388801838388202827867093144",
"11351392327892711796409198262358387106",
"16820978370769166391030074567769035397",
"117570941756750179619975045040380769302"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@212fde3fe76e962598ce1d47b97cc78afdfc71b3",
"signature_type": "Line"
},
{
"id": "CVE-2022-50321-9e469e1e",
"digest": {
"function_hash": "78966033484482963734195307238817247492",
"length": 1677.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "brcmf_netdev_start_xmit",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a4d18318f473e97d628f410215b3fac32d07aed",
"signature_type": "Function"
},
{
"id": "CVE-2022-50321-9ffe5e59",
"digest": {
"line_hashes": [
"266673272822388801838388202827867093144",
"11351392327892711796409198262358387106",
"16820978370769166391030074567769035397",
"117570941756750179619975045040380769302"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a4d18318f473e97d628f410215b3fac32d07aed",
"signature_type": "Line"
},
{
"id": "CVE-2022-50321-bbcb3556",
"digest": {
"function_hash": "78966033484482963734195307238817247492",
"length": 1677.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "brcmf_netdev_start_xmit",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8ef89e5b89ee041a94eecfb6c31fcc237f9168c",
"signature_type": "Function"
},
{
"id": "CVE-2022-50321-c3d6d499",
"digest": {
"function_hash": "78966033484482963734195307238817247492",
"length": 1677.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "brcmf_netdev_start_xmit",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@212fde3fe76e962598ce1d47b97cc78afdfc71b3",
"signature_type": "Function"
},
{
"id": "CVE-2022-50321-d80ebd93",
"digest": {
"function_hash": "78966033484482963734195307238817247492",
"length": 1677.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "brcmf_netdev_start_xmit",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e08e6812efb6a8c676e733de0518594d1517e0d9",
"signature_type": "Function"
},
{
"id": "CVE-2022-50321-de0c679d",
"digest": {
"line_hashes": [
"266673272822388801838388202827867093144",
"11351392327892711796409198262358387106",
"16820978370769166391030074567769035397",
"117570941756750179619975045040380769302"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e08e6812efb6a8c676e733de0518594d1517e0d9",
"signature_type": "Line"
},
{
"id": "CVE-2022-50321-e0764e2d",
"digest": {
"line_hashes": [
"266673272822388801838388202827867093144",
"11351392327892711796409198262358387106",
"16820978370769166391030074567769035397",
"117570941756750179619975045040380769302"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d869a189505224601e310c7769cb90b0e2f60b31",
"signature_type": "Line"
},
{
"id": "CVE-2022-50321-ffd61b37",
"digest": {
"function_hash": "78966033484482963734195307238817247492",
"length": 1677.0
},
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "brcmf_netdev_start_xmit",
"file": "drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f159116d620615779adbf88a5d94713702216d8",
"signature_type": "Function"
}
]