CVE-2023-53802

wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function

State: Published
Severity: Not scored
Published: Dec 9, 2025
Updated: May 11, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function

It is stated that ath9k_htc_rx_msg() either frees the provided skb or passes its management to another callback function. However, the skb is not freed in case there is no another callback function, and Syzkaller was able to cause a memory leak. Also minor comment fix.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	fb9987d0f748c983bb795a86f47522313f701a08 to before b11f95f65cc52ee3a756e6f6a88df37a203e25bdAffected fb9987d0f748c983bb795a86f47522313f701a08 to before 68171c006c8645a3e0293a6c3e6037c6538ac1c5Affected fb9987d0f748c983bb795a86f47522313f701a08 to before 564bc2222bf50eb6cdee715a5431bf4dc9f923c1Affected fb9987d0f748c983bb795a86f47522313f701a08 to before ec246dfe006b2a8f36353f7489e4f525114db9a5Affected fb9987d0f748c983bb795a86f47522313f701a08 to before c0c0614f143b568cd0e9525d53cf12e5dcd11987Affected fb9987d0f748c983bb795a86f47522313f701a08 to before 5a84e51f72580fc70066b03f3dac38421e702a0bAffected fb9987d0f748c983bb795a86f47522313f701a08 to before bbfababb4f899fe1556eac195f9774b6fe675fb6Affected fb9987d0f748c983bb795a86f47522313f701a08 to before 9b25e3985477ac3f02eca5fc1e0cc6850a3f7e69Affected
LinuxLinux	2.6.35Affected before 2.6.35Not affected 4.14.308 through 4.14.Not affected 4.19.276 through 4.19.Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

fb9987d0f748c983bb795a86f47522313f701a08 to before b11f95f65cc52ee3a756e6f6a88df37a203e25bdAffected
fb9987d0f748c983bb795a86f47522313f701a08 to before 68171c006c8645a3e0293a6c3e6037c6538ac1c5Affected
fb9987d0f748c983bb795a86f47522313f701a08 to before 564bc2222bf50eb6cdee715a5431bf4dc9f923c1Affected
fb9987d0f748c983bb795a86f47522313f701a08 to before ec246dfe006b2a8f36353f7489e4f525114db9a5Affected
fb9987d0f748c983bb795a86f47522313f701a08 to before c0c0614f143b568cd0e9525d53cf12e5dcd11987Affected
fb9987d0f748c983bb795a86f47522313f701a08 to before 5a84e51f72580fc70066b03f3dac38421e702a0bAffected
fb9987d0f748c983bb795a86f47522313f701a08 to before bbfababb4f899fe1556eac195f9774b6fe675fb6Affected
fb9987d0f748c983bb795a86f47522313f701a08 to before 9b25e3985477ac3f02eca5fc1e0cc6850a3f7e69Affected

LinuxLinux

2.6.35Affected
before 2.6.35Not affected
4.14.308 through 4.14.*Not affected
4.19.276 through 4.19.*Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.