Double Free in Linux
CVE-2023-52688
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws error, it should free the allocated resources. Currently it is not freeing the core pdev create resources. Avoid this issue by calling the core pdev destroy in the error handler of core rfkill config. Found this issue in the code review and it is compile tested only.
Vulnerability class: Double Free
EPSS: 0.002 (12.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 004ccbc0dd49c63576a4c60a663a38dd3cb6bee5, 6.7, 0
- Linux Linux_kernel
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2023-52688?
- CVE-2023-52688 is a high-severity vulnerability in Linux, classified under Double Free. CVSS score: 7.8/10. Published 2024-05-17.
- How severe is CVE-2023-52688?
- High severity. CVSS v3 base score is 7.8 out of 10.