Memory Leak Vulnerability in Linux Kernel's brcmfmac WiFi Driver

CVE-2022-50321

What is CVE-2022-50321?

A memory leak has been identified in the Linux kernel's brcmfmac WiFi driver, specifically during packet transmission. The function brcmf_netdev_start_xmit() was previously returning NETDEV_TX_OK without appropriately freeing the socket buffer (skb) in the event of a failure during head expansion with pskb_expand_head(). To mitigate this issue, dev_kfree_skb() has been introduced. This fix ensures better memory management and enhances overall network performance.

References