CVE-2023-52688

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52688
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws error, it should free the allocated resources. Currently it is not freeing the core pdev create resources. Avoid this issue by calling the core pdev destroy in the error handler of core rfkill config. Found this issue in the code review and it is compile tested only.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a Patch
https://git.kernel.org/stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8 Patch
https://git.kernel.org/stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a Patch
https://git.kernel.org/stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Sep 2025, 18:46

Type Values Removed Values Added
CWE CWE-415
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a - () https://git.kernel.org/stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a - Patch
References () https://git.kernel.org/stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8 - () https://git.kernel.org/stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

21 Nov 2024, 08:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: ath12k: corrige el controlador de errores de la configuración de rfkill Cuando la configuración principal de rfkill arroja un error, debería liberar los recursos asignados. Actualmente no está liberando recursos de creación de pdev centrales. Evite este problema llamando a core pdev destroy en el controlador de errores de la configuración core rfkill. Se encontró este problema en la revisión del código y solo se probó en compilación.
References () https://git.kernel.org/stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a - () https://git.kernel.org/stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a -
References () https://git.kernel.org/stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8 - () https://git.kernel.org/stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8 -

17 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-17 15:15

Updated : 2025-09-19 18:46

NVD link : CVE-2023-52688

Mitre link : CVE-2023-52688

CVE.ORG link : CVE-2023-52688

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free