{
  "cveId": "CVE-2023-53529",
  "url": "https://patchblox.com/security/cve/CVE-2023-53529",
  "summary": "CVE-2023-53529 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53529, released October 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: rtw88: Fix memory leak in rtw88_usb  Kmeml...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  wifi: rtw88: Fix memory leak in rtw88_usb  Kmemleak shows the following leak arising from routine in the usb probe routine:  unreferenced object 0xffff895cb29bba00 (size 512):   comm \u0022(udev-worker)\u0022, pid 534, jiffies 4294903932 (age 102751.088s)   hex dump (first 32 bytes):     77 30 30 30 00 00 00 00 02 2f 2d 2b 30 00 00 00  w000...../-\u002B0...     02 00 2a 28 00 00 00 00 ff 55 ff ff ff 00 00 00  ..*(.....U......   backtrace:     [\u003Cffffffff9265fa36\u003E] kmalloc_trace\u002B0x26/0x90     [\u003Cffffffffc17eec41\u003E] rtw_usb_probe\u002B0x2f1/0x680 [rtw_usb]     [\u003Cffffffffc03e19fd\u003E] usb_probe_interface\u002B0xdd/0x2e0 [usbcore]     [\u003Cffffffff92b4f2fe\u003E] really_probe\u002B0x18e/0x3d0     [\u003Cffffffff92b4f5b8\u003E] __driver_probe_device\u002B0x78/0x160     [\u003Cffffffff92b4f6bf\u003E] driver_probe_device\u002B0x1f/0x90     [\u003Cffffffff92b4f8df\u003E] __driver_attach\u002B0xbf/0x1b0     [\u003Cffffffff92b4d350\u003E] bus_for_each_dev\u002B0x70/0xc0     [\u003Cffffffff92b4e51e\u003E] bus_add_driver\u002B0x10e/0x210     [\u003Cffffffff92b50935\u003E] driver_register\u002B0x55/0xf0     [\u003Cffffffffc03e0708\u003E] usb_register_driver\u002B0x88/0x140 [usbcore]     [\u003Cffffffff92401153\u003E] do_one_initcall\u002B0x43/0x210     [\u003Cffffffff9254f42a\u003E] do_init_module\u002B0x4a/0x200     [\u003Cffffffff92551d1c\u003E] __do_sys_finit_module\u002B0xac/0x120     [\u003Cffffffff92ee6626\u003E] do_syscall_64\u002B0x56/0x80     [\u003Cffffffff9300006a\u003E] entry_SYSCALL_64_after_hwframe\u002B0x46/0xb0  The leak was verified to be real by unloading the driver, which resulted in a dangling pointer to the allocation.  The allocated memory is freed in rtw_usb_intf_deinit().",
  "published": "2025-10-01T12:15:57Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.0013,
  "epssPercentile": 0.02677,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-53529",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53529",
      "released": "2025-10-01T12:15:57Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-53529",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53529",
      "released": "2025-10-01T12:15:57Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}