CVE-2023-53767: wifi: ath12k: fix memory leak in ath12k_qmi_driver_event_work()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-08 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_qmi_driver_event_work() Currently the buffer pointed by event is not freed in case ATH12K_FLAG_UNREGISTERING bit is set, this causes memory leak. Add a goto skip instead of return, to ensure event and all the list entries are freed properly. Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1

Affected products

Linux kernel: 6.3 — fixed in 6.4

How to fix

Upgrade to a fixed version: Linux kernel 6.4. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/960412bee0ea75f6b3c2dca4a3535795ee84c47a
https://git.kernel.org/stable/c/a87f59041a7f77b4bdab05cea60ac6adc69dc5d2

Get alerted when CVE-2023-53767 or the next vulnerability affects your stack