CVE-2023-54052: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU txs may be dropped if the frame is aggregated in AMSDU. When the problem shows up, some SKBs would be hold in driver to cause network stopped temporarily. Even if the problem can be recovered by txs timeout handling, mt7921 still need to disable txs in AMSDU to avoid this issue.

Affected products

Linux kernel: 5.12 — fixed in 6.6

How to fix

Upgrade to a fixed version: Linux kernel 6.6. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/1cd102aaedb277fbe81dd08cd9f5cae951de2bff
https://git.kernel.org/stable/c/b642f4c5f3de0a8f47808d32b1ebd9c427a42a66
https://git.kernel.org/stable/c/bf5d3fad7219b8de7d3a9cb59f0ea5243b018f07
https://git.kernel.org/stable/c/e74778e91fedc3b2a0143264887bbb32508c5000

Get alerted when CVE-2023-54052 or the next vulnerability affects your stack