In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix memory leak in WMI firmware stats
Memory allocated for firmware pdev, vdev and beacon statistics
are not released during rmmod.
Fix it by calling ath11k_fw_stats_free() function before hardware
unregister.
While at it, avoid calling ath11k_fw_stats_free() while processing
the firmware stats received in the WMI event because the local list
is getting spliced and reinitialised and hence there are no elements
in the list after splicing.
Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
References
Configurations
Configuration 1 (hide)
|
History
06 Feb 2026, 13:57
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| References | () https://git.kernel.org/stable/c/55248d36beb79d3a61c9fb3122dc377fff523c89 - Patch | |
| References | () https://git.kernel.org/stable/c/6aafa1c2d3e3fea2ebe84c018003f2a91722e607 - Patch | |
| References | () https://git.kernel.org/stable/c/86f9330a49d1464849482298dd34d361859183eb - Patch | |
| CWE | CWE-401 | |
| First Time |
Linux
Linux linux Kernel |
04 Oct 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-04 16:15
Updated : 2026-02-06 13:57
NVD link : CVE-2023-53602
Mitre link : CVE-2023-53602
CVE.ORG link : CVE-2023-53602
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-401
Missing Release of Memory after Effective Lifetime