In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: fix firmware check error path

A recent commit fixed the code that parses the firmware files before
downloading them to the controller but introduced a memory leak in case
the sanity checks ever fail.

Make sure to free the firmware buffer before returning on errors.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

NIST: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NIST: CWE-401

OR
          *cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 from (excluding) 6.8.10
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 from (excluding) 6.6.31
          *cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (excluding) 5.15.159
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 from (excluding) 6.1.91

CVE: https://git.kernel.org/stable/c/064688d70c33bb5b49dde6e972b9379a8b045d8a

CVE: https://git.kernel.org/stable/c/40d442f969fb1e871da6fca73d3f8aef1f888558

CVE: https://git.kernel.org/stable/c/580bcd6bf24f9975f97d81d5ef1b64cca9240df9

CVE: https://git.kernel.org/stable/c/7bcba557d5c37cd09ecd5abbe7d50deb86c36d3f

CVE: https://git.kernel.org/stable/c/d1f768214320852766a60a815a0be8f14fba0cc3

kernel.org: https://git.kernel.org/stable/c/064688d70c33bb5b49dde6e972b9379a8b045d8a

kernel.org: https://git.kernel.org/stable/c/40d442f969fb1e871da6fca73d3f8aef1f888558

kernel.org: https://git.kernel.org/stable/c/580bcd6bf24f9975f97d81d5ef1b64cca9240df9

kernel.org: https://git.kernel.org/stable/c/7bcba557d5c37cd09ecd5abbe7d50deb86c36d3f

kernel.org: https://git.kernel.org/stable/c/d1f768214320852766a60a815a0be8f14fba0cc3

CVE: https://git.kernel.org/stable/c/064688d70c33bb5b49dde6e972b9379a8b045d8a Types: Patch

CVE: https://git.kernel.org/stable/c/40d442f969fb1e871da6fca73d3f8aef1f888558 Types: Patch

CVE: https://git.kernel.org/stable/c/580bcd6bf24f9975f97d81d5ef1b64cca9240df9 Types: Patch

CVE: https://git.kernel.org/stable/c/7bcba557d5c37cd09ecd5abbe7d50deb86c36d3f Types: Patch

CVE: https://git.kernel.org/stable/c/d1f768214320852766a60a815a0be8f14fba0cc3 Types: Patch

kernel.org: https://git.kernel.org/stable/c/064688d70c33bb5b49dde6e972b9379a8b045d8a Types: Patch

kernel.org: https://git.kernel.org/stable/c/40d442f969fb1e871da6fca73d3f8aef1f888558 Types: Patch

kernel.org: https://git.kernel.org/stable/c/580bcd6bf24f9975f97d81d5ef1b64cca9240df9 Types: Patch

kernel.org: https://git.kernel.org/stable/c/7bcba557d5c37cd09ecd5abbe7d50deb86c36d3f Types: Patch

kernel.org: https://git.kernel.org/stable/c/d1f768214320852766a60a815a0be8f14fba0cc3 Types: Patch