CVE-2022-50740
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() Syzkaller reports a long-known leak of urbs in ath9k_hif_usb_dealloc_tx_urbs(). The cause of the leak is that usb_get_urb() is called but usb_free_urb() (or usb_put_urb()) is not called inside usb_kill_urb() as urb->dev or urb->ep fields have not been initialized and usb_kill_urb() returns immediately. The patch removes trying to kill urbs located in hif_dev->tx.tx_buf because hif_dev->tx.tx_buf is not supposed to contain urbs which are in pending state (the pending urbs are stored in hif_dev->tx.tx_pending). The tx.tx_lock is acquired so there should not be any changes in the list. Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6f0706ef39fecc6bf56d67728fe0c94e26b43e9d | affected | git | 134ae5eba41294eff76e4be20d6001b8f0192207 | Unavailable | None listed |
| 795d57a558d106b8a5bc2bd7aeaf707d9a099244 | affected | git | 472312fef2b9eccaa03bd59e0ab2527da945e736 | Unavailable | None listed |
| df4318440c1568b7dedc5f7d4e617d0e297a1313 | affected | git | eddbb8f7620f9f8008b090a6e10c460074ca575a | Unavailable | None listed |
| a9990ed2d7ca9339d37c7f67d6f5cb298c3f1b34 | affected | git | 9850791d389b342ae6e573fe8198db0b4d338352 | Unavailable | None listed |
| 03fb92a432ea5abe5909bca1455b7e44a9380480 | affected | git | c3fb3e9a2c0c1a0fa492d90eb19bcfa92a5f884d | Unavailable | None listed |
| 03fb92a432ea5abe5909bca1455b7e44a9380480 | affected | git | d856f7574bcc1d81de565a857caf32f122cd7ce0 | Unavailable | None listed |
| 03fb92a432ea5abe5909bca1455b7e44a9380480 | affected | git | c05189a429fdb371dd455c3c466d67ac2ebff152 | Unavailable | None listed |
| 03fb92a432ea5abe5909bca1455b7e44a9380480 | affected | git | 08aa0537ec8cf29ceccae98acc1a534fc12598c1 | Unavailable | None listed |
| 03fb92a432ea5abe5909bca1455b7e44a9380480 | affected | git | c2a94de38c74e86f49124ac14f093d6a5c377a90 | Unavailable | None listed |
| b92e116ae36f498858dbb18e29a066c3f5348965 | affected | git | Unavailable | Unavailable | None listed |
| 7f5972267295fe49f8da8eb42bc2eb3d140860c0 | affected | git | Unavailable | Unavailable | None listed |
| 2d72d5ce63c92f56b9f978e8befb5838144176b9 | affected | git | Unavailable | Unavailable | None listed |
| 4.9.241 | affected | semver | 4.9.337 | Unavailable | None listed |
| 4.14.203 | affected | semver | 4.14.303 | Unavailable | None listed |
| 4.19.154 | affected | semver | 4.19.270 | Unavailable | None listed |
| 5.4.73 | affected | semver | 5.4.229 | Unavailable | None listed |
| 4.4.241 | affected | semver | 4.5 | Unavailable | None listed |
| 5.8.17 | affected | semver | 5.9 | Unavailable | None listed |
| 5.9.2 | affected | semver | 5.10 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.10 | Unavailable | None listed |
| 4.9.337 | unaffected | semver | Unavailable | 4.9.* | None listed |
| 4.14.303 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.270 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.229 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.163 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.86 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.0.16 | unaffected | semver | Unavailable | 6.0.* | None listed |
| 6.1.2 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |