CVE-2023-52688
Advisory lineage Upstream: 0 Downstream: 7
Analyzed
Published: 17 May 2024, 14:24
Last modified:11 May 2026, 19:31
Vulnerability Summary
Overall Risk (default)
medium
31/100 CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
17 May 2024, 14:24
Published
Vulnerability first disclosed
11 May 2026, 19:31
Last Modified
Vulnerability information updated
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws error, it should free the allocated resources. Currently it is not freeing the core pdev create resources. Avoid this issue by calling the core pdev destroy in the error handler of core rfkill config. Found this issue in the code review and it is compile tested only.
CVSS Metrics
- v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Trends
Current EPSS score: 0.01%• Percentile: 3%
Techniques & Countermeasures
- CWE-415•Double Free
The product calls free() twice on the same memory address.
Affected Systems
- linux•linux
≥ 004ccbc0dd49c63576a4c60a663a38dd3cb6bee5, < b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8 | ≥ 004ccbc0dd49c63576a4c60a663a38dd3cb6bee5, < 898d8b3e1414cd900492ee6a0b582f8095ba4a1a | 6.7
- linux•linux_kernel
≥ 6.7, < 6.7.2