CVE Database›Document archive›CVE-2023-53460

CVE-2023-53460

kernel: wifi: rtw88: fix memory leak in rtw_usb_probe()

Loading…

Severity

Low

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · October 1, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: fix memory leak in rtw_usb_probe()

drivers/net/wireless/realtek/rtw88/usb.c:876 rtw_usb_probe() warn: 'hw' from ieee80211_alloc_hw() not released on lines: 811

Fix this by modifying return to a goto statement.

Statement

A memory leak in rtw_usb_probe() caused the hw object from ieee80211_alloc_hw() to remain allocated on certain probe failures. The fix routes the failure path to the common cleanup label (goto err_release_hw) so the allocation is properly freed. This is a low-impact issue: it can at most cause minor, local memory pressure during repeated device init failures and does not enable code execution or privilege escalation.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-401 · Missing Release of Memory after Effective Lifetime