CVE-2023-53802
Published: Dec 9, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function It is stated that ath9k_htc_rx_msg() either frees the provided skb or passes its management to another callback function. However, the skb is not freed in case there is no another callback function, and Syzkaller was able to cause a memory leak. Also minor comment fix. Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected fb9987d0f748c983bb795a86f47522313f701a08 - < b11f95f65cc52ee3a756e6f6a88df37a203e25bdaffected fb9987d0f748c983bb795a86f47522313f701a08 - < 68171c006c8645a3e0293a6c3e6037c6538ac1c5affected fb9987d0f748c983bb795a86f47522313f701a08 - < 564bc2222bf50eb6cdee715a5431bf4dc9f923c1affected fb9987d0f748c983bb795a86f47522313f701a08 - < ec246dfe006b2a8f36353f7489e4f525114db9a5affected fb9987d0f748c983bb795a86f47522313f701a08 - < c0c0614f143b568cd0e9525d53cf12e5dcd11987+3 more versions |
Linux | Linux | affected 2.6.35unaffected 0 - < 2.6.35unaffected 4.14.308 - <= 4.14.*unaffected 4.19.276 - <= 4.19.*unaffected 5.4.235 - <= 5.4.*+5 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now