Executive Summary

This vulnerability exists in the Linux kernel's wifi driver mt76. Specifically, a function called mt76_connac_mcu_alloc_sta_req() allocates memory (an skb) that should be freed later by another function, mt76_mcu_skb_send_msg(). However, if an intermediate function fails before the message is sent, the allocated memory is not freed, causing a memory leak.

The functions mt76_connac_mcu_sta_wed_update() and mt76_connac_mcu_sta_key_tlv() may fail and trigger this memory leak in their error handling paths. The fix involves explicitly freeing the allocated memory in these error paths to prevent the leak.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to a memory leak in the Linux kernel's wifi driver. Over time, repeated memory leaks can consume system memory, potentially degrading system performance or causing instability. In severe cases, it could lead to denial of service if the system runs out of memory.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability is a memory leak in the Linux kernel's mt76 wifi driver caused by failure to free allocated skb buffers in certain error paths.

To mitigate this vulnerability, you should update your Linux kernel to a version that includes the fix for this issue, which explicitly frees the skb in the error paths of mt76_connac_mcu_alloc_sta_req() related functions.

Since this is a kernel-level fix, applying the latest kernel patches or upgrading to a kernel version containing commit 7c0f63fe37a5 or later is the recommended immediate step.

Useful 0 Not Useful 0