CVE-2023-54191

kernel: Linux kernel: Memory leak in mt76 Wi-Fi driver leads to Denial of Service

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel's mt76 Wi-Fi driver. A memory leak occurs when the mt7996_mcu_exit routine fails to properly clear memory queues if the mt7996_firmware_state encounters an issue. This vulnerability could allow a local attacker with low privileges to cause a Denial of Service (DoS) by consuming system memory.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime