Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function It is stated that ath9k_htc_rx_msg() either frees the provided skb or passes its management to another callback function. However, the skb is not freed in case there is no another callback function, and Syzkaller was able to cause a memory leak. Also minor comment fix. Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
References
- https://git.kernel.org/stable/c/564bc2222bf50eb6cdee715a5431bf4dc9f923c1
- https://git.kernel.org/stable/c/5a84e51f72580fc70066b03f3dac38421e702a0b
- https://git.kernel.org/stable/c/68171c006c8645a3e0293a6c3e6037c6538ac1c5
- https://git.kernel.org/stable/c/9b25e3985477ac3f02eca5fc1e0cc6850a3f7e69
- https://git.kernel.org/stable/c/b11f95f65cc52ee3a756e6f6a88df37a203e25bd
- https://git.kernel.org/stable/c/bbfababb4f899fe1556eac195f9774b6fe675fb6
- https://git.kernel.org/stable/c/c0c0614f143b568cd0e9525d53cf12e5dcd11987
- https://git.kernel.org/stable/c/ec246dfe006b2a8f36353f7489e4f525114db9a5
FAQ
What is CVE-2023-53802?
CVE-2023-53802 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function It is stated that ath9k_htc_rx_msg() either ...
How severe is CVE-2023-53802?
CVSS scoring is not yet available for CVE-2023-53802. Check NVD for updates.
Is there a patch for CVE-2023-53802?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.