CVE-2023-54275

wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup

crypto_alloc_shash() allocates resources, which should be released by crypto_free_shash(). When ath11k_peer_find() fails, there has memory leak. Add missing crypto_free_shash() to fix this.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	243874c64c8137bc90455200a7735da72836ecab to before 137963e3b95776f1d57c62f249a93fe47e019a22Affected 243874c64c8137bc90455200a7735da72836ecab to before 53c8a256e5d3f31d80186de03a3d2a7f747b2aa0Affected 243874c64c8137bc90455200a7735da72836ecab to before e596b36e15a7158b0bb2d55077b6b381ee41020cAffected 243874c64c8137bc90455200a7735da72836ecab to before 64a78ec4f4579798d8e885aca9bdd707bca6b16bAffected 243874c64c8137bc90455200a7735da72836ecab to before ed3f83b3459a67a3ab9d806490ac304b567b1c2dAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

243874c64c8137bc90455200a7735da72836ecab to before 137963e3b95776f1d57c62f249a93fe47e019a22Affected
243874c64c8137bc90455200a7735da72836ecab to before 53c8a256e5d3f31d80186de03a3d2a7f747b2aa0Affected
243874c64c8137bc90455200a7735da72836ecab to before e596b36e15a7158b0bb2d55077b6b381ee41020cAffected
243874c64c8137bc90455200a7735da72836ecab to before 64a78ec4f4579798d8e885aca9bdd707bca6b16bAffected
243874c64c8137bc90455200a7735da72836ecab to before ed3f83b3459a67a3ab9d806490ac304b567b1c2dAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.