CVE-2023-52688CWE-415

CVE-2023-52688

High · published May 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix the error handler of rfkill config

When the core rfkill config throws error, it should free the

allocated resources. Currently it is not freeing the core pdev

create resources. Avoid this issue by calling the core pdev

destroy in the error handler of core rfkill config.

Found this issue in the code review and it is compile tested only.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Weakness
CWE-415 · Double Free
Published
2024-05-17T19:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 6.7, < 6.7.26.7.2
References (4)
EPSS history
Timeline
  • 17 MAY 14:24Z
    wifi: ath12k: fix the error handler of rfkill config
    cvelistv5