CVE-2023-54275: wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup crypto_alloc_shash() allocates resources, which should be released by crypto_free_shash(). When ath11k_peer_find() fails, there has memory leak. Add missing crypto_free_shash() to fix this.

Affected products

Linux kernel: 5.7 — fixed in 6.3

How to fix

Upgrade to a fixed version: Linux kernel 6.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/137963e3b95776f1d57c62f249a93fe47e019a22
https://git.kernel.org/stable/c/53c8a256e5d3f31d80186de03a3d2a7f747b2aa0
https://git.kernel.org/stable/c/64a78ec4f4579798d8e885aca9bdd707bca6b16b
https://git.kernel.org/stable/c/e596b36e15a7158b0bb2d55077b6b381ee41020c
https://git.kernel.org/stable/c/ed3f83b3459a67a3ab9d806490ac304b567b1c2d

Get alerted when CVE-2023-54275 or the next vulnerability affects your stack