CVE-2022-50186 | BDVDB-2026-282996 Detail

Description#

In the Linux kernel, the following vulnerability has been resolved: ath11k: fix missing skb drop on htc_tx_completion error On htc_tx_completion error the skb is not dropped. This is wrong since the completion_handler logic expect the skb to be consumed anyway even when an error is triggered. Not freeing the skb on error is a memory leak since the skb won't be freed anywere else. Correctly free the packet on eid >= ATH11K_HTC_EP_COUNT before returning. Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-06-18Record published in the CVE List.
2. Version 22026-11-05Most recent update recorded in the CVE List.