CVE-2023-53529
- Source
- https://cve.org/CVERecord?id=CVE-2023-53529
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53529.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-53529
- Downstream
- Published
- 2025-10-01T11:46:14.358Z
- Modified
- 2026-03-11T21:27:17.333284Z
- Summary
- wifi: rtw88: Fix memory leak in rtw88_usb
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw88: Fix memory leak in rtw88_usb
Kmemleak shows the following leak arising from routine in the usb probe routine:
unreferenced object 0xffff895cb29bba00 (size 512): comm "(udev-worker)", pid 534, jiffies 4294903932 (age 102751.088s) hex dump (first 32 bytes): 77 30 30 30 00 00 00 00 02 2f 2d 2b 30 00 00 00 w000...../-+0... 02 00 2a 28 00 00 00 00 ff 55 ff ff ff 00 00 00 ..*(.....U...... backtrace: [<ffffffff9265fa36>] kmalloctrace+0x26/0x90 [<ffffffffc17eec41>] rtwusbprobe+0x2f1/0x680 [rtwusb] [<ffffffffc03e19fd>] usbprobeinterface+0xdd/0x2e0 [usbcore] [<ffffffff92b4f2fe>] really_probe+0x18e/0x3d0 [<ffffffff92b4f5b8>] __driverprobedevice+0x78/0x160 [<ffffffff92b4f6bf>] driverprobedevice+0x1f/0x90 [<ffffffff92b4f8df>] __driverattach+0xbf/0x1b0 [<ffffffff92b4d350>] busfor_eachdev+0x70/0xc0 [<ffffffff92b4e51e>] busadddriver+0x10e/0x210 [<ffffffff92b50935>] driverregister+0x55/0xf0 [<ffffffffc03e0708>] usbregisterdriver+0x88/0x140 [usbcore] [<ffffffff92401153>] dooneinitcall+0x43/0x210 [<ffffffff9254f42a>] doinitmodule+0x4a/0x200 [<ffffffff92551d1c>] _dosysfinitmodule+0xac/0x120 [<ffffffff92ee6626>] dosyscall64+0x56/0x80 [<ffffffff9300006a>] entrySYSCALL64afterhwframe+0x46/0xb0
The leak was verified to be real by unloading the driver, which resulted in a dangling pointer to the allocation.
The allocated memory is freed in rtwusbintf_deinit().
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53529.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/59a3a312009723e3e5082899655fdcc420e2b47a
- https://git.kernel.org/stable/c/5bba1ad561a8b5bb14704d8f511cf10466336e3d
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53529.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-53529
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede3037485c68ec1a299ff41160d8fedbd4abc29b9Fixed5bba1ad561a8b5bb14704d8f511cf10466336e3dFixed59a3a312009723e3e5082899655fdcc420e2b47a