Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's ath12k Wi-Fi driver. The issue arises in the 'ath12k_qmi_driver_event_work' function, where the event buffer is not properly freed if the 'ATH12K_FLAG_UNREGISTERING' bit is set. This oversight leads to a memory leak. The vulnerability has been addressed by modifying the function to ensure that the event and all associated list entries are correctly freed, even when the unregistering flag is active.
Exploitation of this vulnerability leads to a memory leak, causing increased memory usage that is not released back to the system.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.