CVE-2024-58063: wifi: rtlwifi: fix memory leaks and invalid access at probe error path
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwifi: fix memory leaks and invalid access at probe error path
Deinitialize at reverse order when probe fails.
When initswvars fails, rtldeinitcore should not be called, specially now that it destroys the rtlwq workqueue.
And call rtlpcideinit and deinitswvars, otherwise, memory will be leaked.
Remove pcisetdrvdata call as it will already be cleaned up by the core driver code and could lead to memory leaks too. cf. commit 8d450935ae7f ("wireless: rtlwifi: remove unnecessary pcisetdrvdata()") and commit 3d86b93064c7 ("rtlwifi: Fix PCI probe error path orphaned memory").
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58063?
CVE-2024-58063 has been classified as low severity due to its nature of memory leaks and invalid access that primarily affects system stability.
How do I fix CVE-2024-58063?
To mitigate CVE-2024-58063, ensure your Linux kernel is updated to the latest stable version where this vulnerability has been resolved.
What systems are affected by CVE-2024-58063?
CVE-2024-58063 affects Linux kernel versions utilized in various distributions that include rtlwifi drivers.
What is the impact of CVE-2024-58063?
The impact of CVE-2024-58063 includes potential memory leaks and unstable behavior when the probe process fails.
Is CVE-2024-58063 remotely exploitable?
CVE-2024-58063 is not considered remotely exploitable as it primarily affects internal memory management during driver initialization.