CVE-2023-53602

wifi: ath11k: fix memory leak in WMI firmware stats

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix memory leak in WMI firmware stats

Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod.

Fix it by calling ath11k_fw_stats_free() function before hardware unregister.

While at it, avoid calling ath11k_fw_stats_free() while processing the firmware stats received in the WMI event because the local list is getting spliced and reinitialised and hence there are no elements in the list after splicing.

Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.15%Up 0.1 points since Oct 5, 2025

What each source reports

NVD Score used5.5

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix memory leak in WMI firmware stats

Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod.

Fix it by calling ath11k_fw_stats_free() function before hardware unregister.

Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

Record: CVE-2023-53602
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-401
Updated: 2026-11-05

CVE ListNo score

wifi: ath11k: fix memory leak in WMI firmware stats

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix memory leak in WMI firmware stats

Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod.

Fix it by calling ath11k_fw_stats_free() function before hardware unregister.

Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

Record: CVE-2023-53602
Updated: 2026-11-05

EUVDEUVD-2025-32267No score

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix memory leak in WMI firmware stats

Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod.

Fix it by calling ath11k_fw_stats_free() function before hardware unregister.

Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

Record: EUVD-2025-32267
Updated: 2026-11-05

GitHub AdvisoriesGHSA-mc2x-3vpx-wfrg5.5

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory...

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix memory leak in WMI firmware stats

Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod.

Fix it by calling ath11k_fw_stats_free() function before hardware unregister.

Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

Record: GHSA-mc2x-3vpx-wfrg
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-401
Updated: 2026-11-02

OSVBELL-CVE-2023-536025.5

Record: BELL-CVE-2023-53602
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-536025.5

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leak in WMI firmware stats Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod. Fix it by calling ath11k_fw_stats_free() function before hardware unregister. While at it, avoid calling ath11k_fw_stats_free() while processing the firmware stats received in the WMI event because the local list is getting spliced and reinitialised and hence there are no elements in the list after splicing. Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

Record: DEBIAN-CVE-2023-53602
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 17 moreShow less

OSVRHSA-2023:65838.2

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2023:6583
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:70777.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2023:7077
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2023-536025.5

CVE-2023-53602 in linux - Patched by Root

Root has patched CVE-2023-53602 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2023-53602
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2023-536025.5

CVE-2023-53602 in linux - Patched by Root

Root has patched CVE-2023-53602 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2023-53602
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2023-536025.5

Record: UBUNTU-CVE-2023-53602
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-11

OSVCLSA-2025-1764151168No score

kernel: Fix of 40 CVEs

perf/aux: Fix AUX buffer serialization {CVE-2024-46713}
block: fix uaf for flush rq while iterating tags {CVE-2024-53170}
zram: fix potential UAF of zram table {CVE-2025-21671}
sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647}
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675}
net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
isofs: Prevent the use of too small fid {CVE-2025-37780}
net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749}
sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142}
ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702}
RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539}
crypto: xts - Handle EBUSY correctly {CVE-2023-53494}
Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
af_unix: Fix data-races around user->unix_inflight. {CVE-2023-53204}
fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367}
wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072}
wifi: rtlwifi: remove unused dualmac control leftovers
wifi: rtlwifi: remove unused timer and related code
partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019}
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730}
net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581}
null_blk: Always check queue mode setting from configfs {CVE-2023-53576}
ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() {CVE-2023-53558}
pstore/ram: Check start of empty przs during init {CVE-2023-53331}
wifi: ath11k: fix memory leak in WMI firmware stats {CVE-2023-53602}
wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229}
net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() {CVE-2022-50486}
RDMA/core: Make sure "ib_port" is valid when access sysfs node {CVE-2022-50475}
RDMA/rxe: Fix mr->map double free {CVE-2022-50543}
scsi: qla2xxx: Fix end of loop test
scsi: qla2xxx: Fix mem access after free
scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
scsi: target: Fix multiple LUN_RESET handling {CVE-2023-53586}
scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675}
scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses {CVE-2023-53675}
scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() {CVE-2023-53675}
scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841}
nbd: fix incomplete validation of ioctl arg {CVE-2023-53513}
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817}
bnxt: avoid overflow in bnxt_get_nvram_directory() {CVE-2023-53661}

Record: CLSA-2025-1764151168
Updated: 2026-11-02

OSVNo score

wifi: ath11k: fix memory leak in WMI firmware stats

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix memory leak in WMI firmware stats

Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod.

Fix it by calling ath11k_fw_stats_free() function before hardware unregister.

Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

Record: CVE-2023-53602
Updated: 2026-11-07

OSVSUSE-SU-2025:21040-1No score