Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k: hifusb: fixed a memory leak related to urbs in ath9khifusbdealloctxurbs Syzkaller reported a well-known leak of urbs in ath9khifusbdealloctxurbs. The cause of the leak is that the usbgeturb function is called, but th...

CVE-2022-50881

CVE-2022-50881 concerns the Linux kernel’s wifi driver ath9k (ath9k_htc) and describes a use-after-free in ath9k_destroy_wmi() triggered during usb disconnect handling. The root cause is access to drv_priv after ieee80211_free_hw() frees hardware in ath9k_htc_hw_deinit(), leading to a use-after-f...

CVE-2023-53641 wifi: ath9k: hif_usb: fix memory leak of remain_skbs

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hifusb: fix memory leak of remainskbs hifdev-remainskb is allocated and used exclusively in ath9khifusbrxstream. It is implied that an allocated remainskb is processed and subsequently freed in error paths only durin...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the lack of a range check for connrspepid in the htcconnectservice function in the wifi driver ath9k...

kernel: wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()

A use-after-free flaw was discovered in the ath9k USB Wi-Fi driver in the Linux kernel. During the disconnect and deinitialization sequence ath9khifusbdisconnect, the driver could attempt to access its private data drvpriv after it has already been freed by the hardware teardown call...

kernel: Linux kernel: Denial of Service in ath9k Wi-Fi driver due to URB memory leak

A flaw was found in the Linux kernel's ath9k Wi-Fi driver. This memory leak vulnerability occurs because Universal Serial Bus USB request blocks URBs are allocated but not properly freed when certain conditions are met during USB device handling. A local attacker could exploit this by triggering...

PT-2023-34423

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the wifi ath9k driver in the Linux Kernel. It involves verifying the presence of expected USB endpoints. The actual impact and attack plausibility have not yet been...

Ubuntu: Security Advisory (USN-5116-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5116-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5116-1: Linux kernel vulnerabilities

It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to expose sensitive information WiFi network traffic. CVE-2020-3702 Alois Wohlschlager discovered that the overlay file system in the Linux kernel did not...