CVE-2022-50321

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()

The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it. Compile tested only.

This issue results in a memory leak when pskb_expand_head() fails in brcmf_netdev_start_xmit(). While it can lead to gradual resource exhaustion under repeated error conditions, exploitation for privilege escalation or information disclosure is not realistic. The practical impact is limited to potential denial of service (resource exhaustion) under heavy load.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module bca/core, brcmfmac from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.