7.8high
CVE-2023-52688
wifi: ath12k: fix the error handler of rfkill config
Published 2 y ago · modified 3 mo ago · JSON
CVSS
7.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 12%
Public exploits
0
none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix the error handler of rfkill config
When the core rfkill config throws error, it should free the allocated resources. Currently it is not freeing the core pdev create resources. Avoid this issue by calling the core pdev destroy in the error handler of core rfkill config.
Found this issue in the code review and it is compile tested only.
CISA SSVC assessment
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction (EPSS)
0.22% probability of exploitation in the next 30 days, higher than 12% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Linux Linux
Classification
- Weakness
- CWE-415 Double Free
- Technology feeds
- Linux kernel (RSS, critical only)
References
- git.kernel.org /stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8 · x_transferred
- git.kernel.org /stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a · x_transferred
Sources
- CVE List: CVE-2023-52688
- NVD: CVE-2023-52688
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.