CVE-2023-53422

wifi: iwlwifi: fw: fix memory leak in debugfs

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: fw: fix memory leak in debugfs

Fix a memory leak that occurs when reading the fw_info file all the way, since we return NULL indicating no more data, but don't free the status tracking object.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	36dfe9ac6e8b8fc2e25733d003a867a40db791da to before 89496d6cff297c88fe0286a440c380ceb172da2bAffected 36dfe9ac6e8b8fc2e25733d003a867a40db791da to before e302e9ca14a86a80eadfb24a34d8675aadaf3ef3Affected 36dfe9ac6e8b8fc2e25733d003a867a40db791da to before 37f64bc8e001f216566d17ef9fd5608c762ebcd4Affected 36dfe9ac6e8b8fc2e25733d003a867a40db791da to before fe17124282da055cb2e53f0131521459b5c7866cAffected 36dfe9ac6e8b8fc2e25733d003a867a40db791da to before b830ba20b43be52eae7d4087b61a0079dec56820Affected 36dfe9ac6e8b8fc2e25733d003a867a40db791da to before 3d90d2f4a018fe8cfd65068bc6350b6222be4852Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.180 through 5.10.Not affected 5.15.111 through 5.15.Not affected 6.1.28 through 6.1.Not affected 6.2.15 through 6.2.Not affected 6.3.2 through 6.3.*Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

36dfe9ac6e8b8fc2e25733d003a867a40db791da to before 89496d6cff297c88fe0286a440c380ceb172da2bAffected
36dfe9ac6e8b8fc2e25733d003a867a40db791da to before e302e9ca14a86a80eadfb24a34d8675aadaf3ef3Affected
36dfe9ac6e8b8fc2e25733d003a867a40db791da to before 37f64bc8e001f216566d17ef9fd5608c762ebcd4Affected
36dfe9ac6e8b8fc2e25733d003a867a40db791da to before fe17124282da055cb2e53f0131521459b5c7866cAffected
36dfe9ac6e8b8fc2e25733d003a867a40db791da to before b830ba20b43be52eae7d4087b61a0079dec56820Affected
36dfe9ac6e8b8fc2e25733d003a867a40db791da to before 3d90d2f4a018fe8cfd65068bc6350b6222be4852Affected

LinuxLinux

5.8Affected
before 5.8Not affected
5.10.180 through 5.10.*Not affected
5.15.111 through 5.15.*Not affected
6.1.28 through 6.1.*Not affected
6.2.15 through 6.2.*Not affected
6.3.2 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.