{"affected":[],"cveId":"CVE-2022-50740","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()\n\nSyzkaller reports a long-known leak of urbs in\nath9k_hif_usb_dealloc_tx_urbs().\n\nThe cause of the leak is that usb_get_urb() is called but usb_free_urb()\n(or usb_put_urb()) is not called inside usb_kill_urb() as urb->dev or\nurb->ep fields have not been initialized and usb_kill_urb() returns\nimmediately.\n\nThe patch removes trying to kill urbs located in hif_dev->tx.tx_buf\nbecause hif_dev->tx.tx_buf is not supposed to contain urbs which are in\npending state (the pending urbs are stored in hif_dev->tx.tx_pending).\nThe tx.tx_lock is acquired so there should not be any changes in the list.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794312600177,"publishedAt":1766582160703,"references":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/08aa0537ec8cf29ceccae98acc1a534fc12598c1"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/134ae5eba41294eff76e4be20d6001b8f0192207"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/472312fef2b9eccaa03bd59e0ab2527da945e736"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/9850791d389b342ae6e573fe8198db0b4d338352"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/c05189a429fdb371dd455c3c466d67ac2ebff152"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/c2a94de38c74e86f49124ac14f093d6a5c377a90"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/c3fb3e9a2c0c1a0fa492d90eb19bcfa92a5f884d"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/d856f7574bcc1d81de565a857caf32f122cd7ce0"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/eddbb8f7620f9f8008b090a6e10c460074ca575a"}],"remediation":[],"revision":"85928a501012b81cb880c8a8dd426b29740c6e9aa47ac4b24c726f7949a2e0d9","sources":[{"modifiedAt":1794312600177,"name":"NVD","retrievedAt":1794313075923,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50740"}],"ssvc":null,"status":"published","title":"CVE-2022-50740","updatedAt":1794313075923}