CVE-2023-53199

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the ath9k hif usb rx stream() function within the ath9k USB Host Interface (HIF) driver. Syzkaller detected that when processing skbs (socket buffers) in this function, allocated skbs in the skb pool are not freed if ath9k hif usb rx stream() fails due to an incorrect packet length or tag. This results in a memory leak. The patch addresses this by ensuring that associated packets in the skb pool are dropped and freed when an invalid skb is detected, and by nullifying the remain skb pointer after processing to prevent potential use-after-free issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.