PT-2025-9944
CVE-2024-58063
·
Published
2024-12-06
·
Updated
2026-10-21
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak and invalid access issue in the Linux kernel's wifi component, specifically in the rtlwifi module, has been identified. The problem occurs during the probe error path, where memory is not properly deinitialized, leading to leaks. The issue arises when the
init sw vars function fails, and rtl deinit core is called, which destroys the rtl wq workqueue. To fix this, rtl pci deinit and deinit sw vars should be called to prevent memory leaks. Additionally, the pci set drvdata call has been removed to avoid potential memory leaks, as it is already handled by the core driver code.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾