CVE-2024-53191

wifi: ath12k: fix warning when unbinding

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp->tx_ring[i].tx_status are released. However this is released again when the device is unbinded (ath12k_pci), and we get: WARNING: CPU: 0 PID: 2098 at mm/slub.c:4689 free_large_kmalloc+0x4d/0x80 Call Trace: free_large_kmalloc ath12k_dp_free ath12k_core_deinit ath12k_pci_remove ... The issue is always reproducible from a VM because the MSI addressing initialization is failing. In order to fix the issue, just set the buffers to NULL after releasing in order to avoid the double free.

Category

7.8
CVSS
Severity: High
CVSS 3.1 •
EPSS 0.03%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/223b546c6222d42147eff034433002ca5e2e7e09 patch
https://git.kernel.org/stable/c/90556b96338aa6037cd26dac857327fda7c19732 patch
https://git.kernel.org/stable/c/94c9100b600f05a36b33f9ed76dbd6fb0eb25386 patch
https://git.kernel.org/stable/c/ca68ce0d9f4bcd032fd1334441175ae399642a06 patch

Frequently Asked Questions

What is the severity of CVE-2024-53191?
CVE-2024-53191 has been scored as a high severity vulnerability.
How to fix CVE-2024-53191?
To fix CVE-2024-53191, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-53191 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-53191 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-53191?
CVE-2024-53191 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.