| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025091856-CVE-2023-53422-8cca@gregkh> Date: Thu, 18 Sep 2025 18:04:13 +0200 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...nel.org> Subject: CVE-2023-53422: wifi: iwlwifi: fw: fix memory leak in debugfs From: Greg Kroah-Hartman <gregkh@...nel.org> Description =========== In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fw_info file all the way, since we return NULL indicating no more data, but don't free the status tracking object. The Linux kernel CVE team has assigned CVE-2023-53422 to this issue. Affected and fixed versions =========================== Issue introduced in 5.8 with commit 36dfe9ac6e8b8fc2e25733d003a867a40db791da and fixed in 5.10.180 with commit 89496d6cff297c88fe0286a440c380ceb172da2b Issue introduced in 5.8 with commit 36dfe9ac6e8b8fc2e25733d003a867a40db791da and fixed in 5.15.111 with commit e302e9ca14a86a80eadfb24a34d8675aadaf3ef3 Issue introduced in 5.8 with commit 36dfe9ac6e8b8fc2e25733d003a867a40db791da and fixed in 6.1.28 with commit 37f64bc8e001f216566d17ef9fd5608c762ebcd4 Issue introduced in 5.8 with commit 36dfe9ac6e8b8fc2e25733d003a867a40db791da and fixed in 6.2.15 with commit fe17124282da055cb2e53f0131521459b5c7866c Issue introduced in 5.8 with commit 36dfe9ac6e8b8fc2e25733d003a867a40db791da and fixed in 6.3.2 with commit b830ba20b43be52eae7d4087b61a0079dec56820 Issue introduced in 5.8 with commit 36dfe9ac6e8b8fc2e25733d003a867a40db791da and fixed in 6.4 with commit 3d90d2f4a018fe8cfd65068bc6350b6222be4852 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2023-53422 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/net/wireless/intel/iwlwifi/fw/debugfs.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/89496d6cff297c88fe0286a440c380ceb172da2b https://git.kernel.org/stable/c/e302e9ca14a86a80eadfb24a34d8675aadaf3ef3 https://git.kernel.org/stable/c/37f64bc8e001f216566d17ef9fd5608c762ebcd4 https://git.kernel.org/stable/c/fe17124282da055cb2e53f0131521459b5c7866c https://git.kernel.org/stable/c/b830ba20b43be52eae7d4087b61a0079dec56820 https://git.kernel.org/stable/c/3d90d2f4a018fe8cfd65068bc6350b6222be4852
Powered by blists - more mailing lists