Riskcovery

CVE-2023-53602

wifi: ath11k: fix memory leak in WMI firmware stats

State
Published
Severity
Not scored
Published
Oct 4, 2025
Updated
May 11, 2026
Reserved
Oct 4, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix memory leak in WMI firmware stats

Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod.

Fix it by calling ath11k_fw_stats_free() function before hardware unregister.

While at it, avoid calling ath11k_fw_stats_free() while processing the firmware stats received in the WMI event because the local list is getting spliced and reinitialised and hence there are no elements in the list after splicing.

Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d5c65159f2895379e11ca13f62feabe93278985d to before 86f9330a49d1464849482298dd34d361859183ebAffected
  • d5c65159f2895379e11ca13f62feabe93278985d to before 55248d36beb79d3a61c9fb3122dc377fff523c89Affected
  • d5c65159f2895379e11ca13f62feabe93278985d to before 6aafa1c2d3e3fea2ebe84c018003f2a91722e607Affected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 6.1.42 through 6.1.*Not affected
  • 6.4.7 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.