CVE-2023-54016

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-54016
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54016.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-54016
Downstream
Published
2025-12-24T10:55:47.691Z
Modified
2026-01-05T21:06:48.903918Z
Summary
wifi: ath12k: Fix memory leak in rx_desc and tx_desc
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Fix memory leak in rxdesc and txdesc

Currently when ath12kdpccdescinit() is called we allocate memory to rxdescs and txdescs. In ath12kdpcccleanup(), during descriptor cleanup rxdescs and tx_descs memory is not freed.

This is cause of memory leak. These allocated memory should be freed in ath12kdpcc_cleanup.

In ath12kdpccdescinit(), we can save base address of rxdescs and txdescs. In ath12kdpcccleanup(), we can free rxdescs and tx_descs memory using their base address.

Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54016.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d889913205cf7ebda905b1e62c5867ed4e39f6c2
Fixed
e16be2d34883eecfe7fd888fcdb76c7a5db5d187
Fixed
afb522b36e76acaa9f8fc06d0a9742d841c47c16

Affected versions

v6.*

v6.1
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.5.1
v6.5.2
v6.5.3
v6.5.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54016.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.5.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54016.json"