CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the ath12k Wi-Fi driver, where improper handling of invalid NWIFI header lengths during TKIP MIC verification can lead to a memory leak. This occurs because the function fails to release the corresponding MSDU when an error is encountered, potentially exhausting system memory over time. Organizations using affected Linux systems, particularly those relying on ath12k drivers for Wi-Fi connectivity, should prioritize remediation to prevent resource depletion and maintain system stability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() In ath12k_wifi7_dp_rx_h_verify_tkip_mic(), the call to ath12k_dp_rx_check_nwifi_hdr_len_valid() may return false when the NWIFI header length is invalid, causing the function to abort early with -EINVAL. When this happens, the error propagates to ath12k_wifi7_dp_rx_h_defrag(), which clears first_frag by setting it to NULL. As a result, the corresponding MSDU is no longer referenced by the defragmentation path and is never freed. This leads to a memory leak for the affected MSDU on this error path. Proper cleanup is required to ensure the MSDU is released when header validation fails during TKIP MIC verification. Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3