Linux Kernel Memory Leak Vulnerability in cfg80211 Wi-Fi Subsystem

A memory leak vulnerability has been identified in the Linux kernel's Wi-Fi subsystem, specifically within the cfg80211 component. The issue arises in the query_regdb_file() function, where the alpha2 parameter is duplicated using kmemdup() and later freed in regdb_fw_cb(). However, the request_firmware_nowait() function can fail without invoking regdb_fw_cb(), leading to the memory leak.

Impact

Exploitation of this vulnerability causes a memory leak, which can lead to increased memory usage and potential exhaustion of system resources.