CVE-2023-53460
kernel: wifi: rtw88: fix memory leak in rtw_usb_probe()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 1, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw88: fix memory leak in rtw_usb_probe()
drivers/net/wireless/realtek/rtw88/usb.c:876 rtw_usb_probe() warn: 'hw' from ieee80211_alloc_hw() not released on lines: 811
Fix this by modifying return to a goto statement.
Statement
A memory leak in rtw_usb_probe() caused the hw object from ieee80211_alloc_hw() to remain allocated on certain probe failures. The fix routes the failure path to the common cleanup label (goto err_release_hw) so the allocation is properly freed. This is a low-impact issue: it can at most cause minor, local memory pressure during repeated device init failures and does not enable code execution or privilege escalation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 · Missing Release of Memory after Effective Lifetime