What’s Vulnerable › Vulnerabilities

CVE-2023-52688: wifi: ath12k: fix the error handler of rfkill config

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-17 · updated 2026-08-04
• Weakness: CWE-415

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws error, it should free the allocated resources. Currently it is not freeing the core pdev create resources. Avoid this issue by calling the core pdev destroy in the error handler of core rfkill config. Found this issue in the code review and it is compile tested only.

Affected products

• Linux kernel: from 6.7 before 6.7.2 — fixed in 6.7.2

How to fix

Upgrade to a fixed version: Linux kernel 6.7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a
• https://git.kernel.org/stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8
• https://git.kernel.org/stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a
• https://git.kernel.org/stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8

Get alerted when CVE-2023-52688 or the next vulnerability affects your stack