Skip to content
Heist/ feed
Unrated

wifi: ath11k: fix memory leaks in beacon template setup

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leaks in beacon template setup The functions ath11k_mac_setup_bcn_tmpl_ema() and ath11k_mac_setup_bcn_tmpl_mbssid() allocate memory for beacon templates but fail to free it when parameter setup returns an error. Since beacon templates must be released during normal execution, they must also be released in the error handling paths to prevent memory leaks. Fix this by using unified exit paths with proper cleanup in the respective error paths. Compile tested only. Issue found using a prototype static analysis tool and code review.

Announced Source revision 1
Original source ↗

CVE-2026-53113

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-53113

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "335a92765d308dfe22826f5562cd4b4389b45e71",
        "lessThan": "7bedc489611f01634cec20f88f961a1f08e8d935",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "335a92765d308dfe22826f5562cd4b4389b45e71",
        "lessThan": "9478aa5b39e986d45fafe279c24d3546783c22b1",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "335a92765d308dfe22826f5562cd4b4389b45e71",
        "lessThan": "5fc3d921512d31839227a2d22a2990de02acefeb",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "335a92765d308dfe22826f5562cd4b4389b45e71",
        "lessThan": "5d63aa38d5ca85206d9699ffdd616b58780dba07",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "335a92765d308dfe22826f5562cd4b4389b45e71",
        "lessThan": "ff49eba595df500e4ddccc593088c8a4ab5f2c27",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/wireless/ath/ath11k/mac.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.5"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.5",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "6.6.160",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.109",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.50",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "7.0.10",
        "versionType": "semver",
        "lessThanOrEqual": "7.0.*"
      },
      {
        "status": "unaffected",
        "version": "7.1",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/wireless/ath/ath11k/mac.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-53113

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#46367 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement