CVE-2023-53767
kernel: Linux kernel: Denial of Service via memory leak in ath12k Wi-Fi driver
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 8, 2025
Updated · July 22, 2026
Description
A flaw was found in the Linux kernel's ath12k Wi-Fi driver. A local user could exploit a memory leak in the ath12k_qmi_driver_event_work() function. This occurs when the ATH12K_FLAG_UNREGISTERING bit is set, preventing the proper freeing of allocated memory. This memory leak can lead to a denial of service (DoS) on the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime