Not yet scoredPublished Dec 30, 2025

CVE-2023-54275wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup

Updated under an hour ago (Oct 28, 2026, 8:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup crypto_alloc_shash() allocates resources, which should be released by crypto_free_shash(). When ath11k_peer_find() fails, there has memory leak. Add missing crypto_free_shash() to fix this.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	243874c64c8137bc90455200a7735da72836ecab builds before 137963e3b95776f1d57c62f249a93fe47e019a22; 243874c64c8137bc90455200a7735da72836ecab builds before 53c8a256e5d3f31d80186de03a3d2a7f747b2aa0; from 243874c64c8137bc90455200a7735da72836ecab before e596b36e15a7158b0bb2d55077b6b381ee41020c; 243874c64c8137bc90455200a7735da72836ecab builds before 64a78ec4f4579798d8e885aca9bdd707bca6b16b; from 243874c64c8137bc90455200a7735da72836ecab before ed3f83b3459a67a3ab9d806490ac304b567b1c2d	CNA record

References

References

https://git.kernel.org/stable/c/137963e3b95776f1d57c62f249a93fe47e019a22
https://git.kernel.org/stable/c/53c8a256e5d3f31d80186de03a3d2a7f747b2aa0
https://git.kernel.org/stable/c/e596b36e15a7158b0bb2d55077b6b381ee41020c
https://git.kernel.org/stable/c/64a78ec4f4579798d8e885aca9bdd707bca6b16b
https://git.kernel.org/stable/c/ed3f83b3459a67a3ab9d806490ac304b567b1c2d

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.