Memory Leak Vulnerability in Linux Kernel's ath11k Driver

CVE-2022-50418

What is CVE-2022-50418?

The ath11k driver in the Linux kernel has a vulnerability that could lead to a memory leak. When the mhi_alloc_controller() function allocates memory for mhi_ctrl, it is critical that any errors during operations subsequently free this memory. However, the ath11k_mhi_read_addr_from_dt() function may return without calling mhi_free_controller() upon encountering an error, leaving allocated memory unused and potentially leading to resource depletion. This vulnerability underscores the importance of proper error handling in driver operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References