What’s Vulnerable › Vulnerabilities

CVE-2023-53422: wifi: iwlwifi: fw: fix memory leak in debugfs

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fw_info file all the way, since we return NULL indicating no more data, but don't free the status tracking object.

Affected products

• Linux kernel: from 5.8 before 5.10.180; from 5.11 before 5.15.111; from 5.16 before 6.1.28; from 6.2 before 6.2.15; from 6.3 before 6.3.2 — fixed in 5.10.180, 5.15.111, 6.1.28, 6.2.15, 6.3.2

How to fix

Upgrade to a fixed version: Linux kernel 5.10.180, 5.15.111, 6.1.28, 6.2.15. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/37f64bc8e001f216566d17ef9fd5608c762ebcd4
• https://git.kernel.org/stable/c/3d90d2f4a018fe8cfd65068bc6350b6222be4852
• https://git.kernel.org/stable/c/89496d6cff297c88fe0286a440c380ceb172da2b
• https://git.kernel.org/stable/c/b830ba20b43be52eae7d4087b61a0079dec56820
• https://git.kernel.org/stable/c/e302e9ca14a86a80eadfb24a34d8675aadaf3ef3
• https://git.kernel.org/stable/c/fe17124282da055cb2e53f0131521459b5c7866c

Get alerted when CVE-2023-53422 or the next vulnerability affects your stack