CVE-2026-53113 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leaks in beacon template setup The functions ath11k_mac_setup_bcn_tmpl_ema() and ath11k_mac_setup_bcn_tmpl_mbssid() allocate memory for beacon templates but fail to free it when parameter setup returns an error. Since beacon templates must be released during normal execution, they must also be released in the error handling paths to prevent memory leaks. Fix this by using unified exit paths with proper cleanup in the respective error paths. Compile tested only. Issue found using a prototype static analysis tool and code review.
A memory leak vulnerability has been identified in the Linux kernel's ath11k wireless driver. The issue arises in the functions ath11k_mac_setup_bcn_tmpl_ema() and ath11k_mac_setup_bcn_tmpl_mbssid(), which allocate memory for beacon templates but fail to release it when an error occurs. This oversight can lead to memory leaks, as beacon templates are not properly freed during error handling. The vulnerability has been addressed by implementing unified exit paths that include the necessary cleanup, ensuring that allocated memory is released even when parameter setup encounters an error.
Users can upgrade to the patched version of the Linux kernel available in the official Linux Kernel Git Repository. Instructions for downloading the latest stable version can be found in the repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/5d63aa38d5ca85206d9699ffdd616b58780dba07 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5fc3d921512d31839227a2d22a2990de02acefeb | kernel.org | |
| https://git.kernel.org/stable/c/9478aa5b39e986d45fafe279c24d3546783c22b1 | kernel.org | |
| https://git.kernel.org/stable/c/ff49eba595df500e4ddccc593088c8a4ab5f2c27 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.5, < 7.0.10 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 7, 2026 | CVE Modified | kernel.org |
| Jul 23, 2026 | Initial Analysis | [email protected] |
| Jun 24, 2026 | New CVE Received | kernel.org |