| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025120942-CVE-2022-50660-562d@gregkh> Date: Tue, 9 Dec 2025 10:30:45 +0900 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...nel.org> Subject: CVE-2022-50660: wifi: ipw2200: fix memory leak in ipw_wdev_init() From: Greg Kroah-Hartman <gregkh@...nel.org> Description =========== In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2200: fix memory leak in ipw_wdev_init() In the error path of ipw_wdev_init(), exception value is returned, and the memory applied for in the function is not released. Also the memory is not released in ipw_pci_probe(). As a result, memory leakage occurs. So memory release needs to be added to the error path of ipw_wdev_init(). The Linux kernel CVE team has assigned CVE-2022-50660 to this issue. Affected and fixed versions =========================== Issue introduced in 2.6.33 with commit a3caa99e6c68f466c13cfea74097f6fb01b45e25 and fixed in 4.14.308 with commit 75d20ba9506eb90d92e660e04dd887ff1495fcc3 Issue introduced in 2.6.33 with commit a3caa99e6c68f466c13cfea74097f6fb01b45e25 and fixed in 4.19.276 with commit fb3517b92a45c8004ac26250ae041a24eb23fef1 Issue introduced in 2.6.33 with commit a3caa99e6c68f466c13cfea74097f6fb01b45e25 and fixed in 5.4.235 with commit 112c1af02b8f535baf42ef9d807aea963705ef15 Issue introduced in 2.6.33 with commit a3caa99e6c68f466c13cfea74097f6fb01b45e25 and fixed in 5.10.173 with commit 8a2eb9d9d0c1535bc8e22840193bff4cdcac878b Issue introduced in 2.6.33 with commit a3caa99e6c68f466c13cfea74097f6fb01b45e25 and fixed in 5.15.99 with commit 9424ea9d557ef41d86eb40b6349ae991c3dcff89 Issue introduced in 2.6.33 with commit a3caa99e6c68f466c13cfea74097f6fb01b45e25 and fixed in 6.1.16 with commit 62ec7e8bf42f1542f966dda687c654aae81718c8 Issue introduced in 2.6.33 with commit a3caa99e6c68f466c13cfea74097f6fb01b45e25 and fixed in 6.2.3 with commit 1f590fb3d14e5db3a9e06ee141b1685c429278ce Issue introduced in 2.6.33 with commit a3caa99e6c68f466c13cfea74097f6fb01b45e25 and fixed in 6.3 with commit 9fe21dc626117fb44a8eb393713a86a620128ce3 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-50660 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/net/wireless/intel/ipw2x00/ipw2200.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/75d20ba9506eb90d92e660e04dd887ff1495fcc3 https://git.kernel.org/stable/c/fb3517b92a45c8004ac26250ae041a24eb23fef1 https://git.kernel.org/stable/c/112c1af02b8f535baf42ef9d807aea963705ef15 https://git.kernel.org/stable/c/8a2eb9d9d0c1535bc8e22840193bff4cdcac878b https://git.kernel.org/stable/c/9424ea9d557ef41d86eb40b6349ae991c3dcff89 https://git.kernel.org/stable/c/62ec7e8bf42f1542f966dda687c654aae81718c8 https://git.kernel.org/stable/c/1f590fb3d14e5db3a9e06ee141b1685c429278ce https://git.kernel.org/stable/c/9fe21dc626117fb44a8eb393713a86a620128ce3
Powered by blists - more mailing lists