CVE-2023-53574

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: delete timer and free skb queue when unloading

Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue in 'rtw_core_deinit()', shrink critical section in the latter by freeing COEX queue out of TX report lock scope.

The defect manifests only on driver unload/unbind: a pending TX-purge timer and non-purged queues could run after structures were freed, leading to UAF/crash. This is a local, privileged issue (requires module unload or device unbind), so for the CVSS the PR:H.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.