LiveActive security incident?Get immediate response
CVE Record

CVE-2023-53467: wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie()

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie() Do `kfree_skb(new)` before `goto out` to prevent potential leak.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

CVE-2023-53467 is a Linux kernel issue in the Realtek rtw89 Wi-Fi driver. A failed code path could leak kernel memory buffers. The public record does not provide CVSS, CWE, or evidence of active exploitation. Business urgency is mainly for fleets using affected Linux kernels with rtw89-capable wireless hardware.

Executive priority

Handle through normal kernel patch management unless your environment heavily uses Realtek rtw89 Wi-Fi on affected kernels. There is no public evidence of exploitation, but kernel memory leaks can affect reliability and should not be ignored on endpoint fleets.

Technical view

The issue is in rtw89_append_probe_req_ie(), where an allocated skb named new was not freed before an error exit. The fix adds kfree_skb(new) before goto out. The CVE record lists Linux kernel versions including 5.18, 6.1.16, 6.2.3, and 6.3 as affected, with stable kernel commits referenced.

Likely exposure

Exposure is likely limited to Linux systems running affected kernels with the rtw89 Wi-Fi driver present or usable. Servers without Realtek Wi-Fi hardware are less likely to be exposed. Distribution kernel backports may change exact status, so version-only checks can be misleading.

Exploitation context

The sources describe a potential memory leak, not privilege escalation or remote code execution. No KEV listing or cited source indicates active exploitation. Public evidence does not establish whether an attacker can reliably trigger the leak or cause meaningful denial of service.

Researcher notes

The public record is sparse: no CVSS, CWE, exploit status, or detailed trigger conditions are provided. Analysis should focus on the referenced stable commits and downstream backports. Avoid assuming network-reachable exploitation without additional evidence.

Mitigation direction

  • Update to a Linux kernel or distribution package containing the referenced stable fixes.
  • Check your Linux distribution advisory for backported fixes and affected package versions.
  • Prioritize laptops, workstations, and embedded Linux devices using Realtek rtw89 Wi-Fi.
  • If rtw89 is unnecessary, consider reducing exposure per vendor-approved configuration guidance.

Validation and detection

  • Inventory Linux kernel versions and systems with rtw89-capable Wi-Fi hardware.
  • Confirm whether the running kernel includes one of the referenced stable commits or a distro backport.
  • Review distribution security notices for CVE-2023-53467 coverage.
  • Monitor affected endpoints for unusual kernel memory pressure if immediate patching is delayed.
Prepared
Confidence
medium
Sources
5

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2023-53467 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
0ADP providers
4Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux895907779752606f6a4795abfc008509f8e38314, 895907779752606f6a4795abfc008509f8e38314, 895907779752606f6a4795abfc008509f8e38314unaffected
LinuxLinux5.18, 0, 6.1.16, 6.2.3, 6.3affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.