CVE-2026-80942: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars()
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92duinitswvars()
The memory allocated inside rtl92duinitshareddata() is not freed in any of the subsequent error paths in rtl92duinitswvars(). Fix that by adding a call to rtl92dudeinitshareddata() in the error path.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In rtl8192du_init_sw_vars(), ensure rtl92du_deinit_shared_data() is called on all subsequent error paths after memory allocation in rtl92du_init_shared_data() to prevent the memory leak.
Event History
Frequently Asked Questions
Under what conditions can the leak occur?
The leak occurs when rtl92du_init_shared_data() allocates memory and a later step in rtl92du_init_sw_vars() follows an error path. The affected code is in the Linux kernel rtlwifi driver for rtl8192du.
What is the practical impact if the issue is triggered?
Memory allocated during driver initialization may not be freed on subsequent initialization failures. The provided information identifies a memory leak, but does not specify a remote attack path, privilege requirement, or further impact.
What change addresses the issue?
The fix adds a call to rtl92du_deinit_shared_data() on the relevant rtl92du_init_sw_vars() error path, ensuring memory allocated by rtl92du_init_shared_data() is released.