Riskcovery

CVE-2024-35828

wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()

State
Published
Severity
Not scored
Published
May 17, 2024
Updated
Oct 15, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()

In the for statement of lbs_allocate_cmd_buffer(), if the allocation of cmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs to be freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 to before 96481624fb5a6319079fb5059e46dbce43a90186Affected
  • 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 to before bea9573c795acec5614d4ac2dcc7b3b684cea5bfAffected
  • 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 to before f0dd27314c7afe34794c2aa19dd6f2d30eb23bc7Affected
  • 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 to before e888c4461e109f7b93c3522afcbbaa5a8fdf29d2Affected
  • 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 to before 4d99d267da3415db2124029cb5a6d2d955ca43f9Affected
  • 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 to before da10f6b7918abd5b4bc5c9cb66f0fc6763ac48f3Affected
  • 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 to before d219724d4b0ddb8ec7dfeaed5989f23edabaf591Affected
  • 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 to before 8e243ac649c10922a6b4855170eaefe4c5b3faabAffected
  • 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 to before 5f0e4aede01cb01fa633171f0533affd25328c3aAffected
LinuxLinux
  • 2.6.22Affected
  • before 2.6.22Not affected
  • 4.19.311 through 4.19.*Not affected
  • 5.4.273 through 5.4.*Not affected
  • 5.10.214 through 5.10.*Not affected
  • 5.15.153 through 5.15.*Not affected
  • 6.1.83 through 6.1.*Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.