In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp->tx_ring[i].tx_status are released. However this is released again when the device is unbinded (ath12k_pci), and we get: WARNING: CPU: 0 PID: 2098 at mm/slub.c:4689 free_large_kmalloc+0x4d/0x80 Call Trace: free_large_kmalloc ath12k_dp_free ath12k_core_deinit ath12k_pci_remove ... The issue is always reproducible from a VM because the MSI addressing initialization is failing. In order to fix the issue, just set the buffers to NULL after releasing in order to avoid the double free.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/223b546c6222d42147eff034433002ca5e2e7e09 cve-icon cve-icon
https://git.kernel.org/stable/c/90556b96338aa6037cd26dac857327fda7c19732 cve-icon cve-icon
https://git.kernel.org/stable/c/94c9100b600f05a36b33f9ed76dbd6fb0eb25386 cve-icon cve-icon
https://git.kernel.org/stable/c/ca68ce0d9f4bcd032fd1334441175ae399642a06 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024122723-CVE-2024-53191-df03@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-53191 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-53191 cve-icon
History

Wed, 01 Oct 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 13 Feb 2025 00:30:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Low

 threat_severity

Important

Fri, 31 Jan 2025 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-415
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Mon, 30 Dec 2024 01:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Fri, 27 Dec 2024 14:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix warning when unbinding If there is an error during some initialization related to firmware, the buffers dp->tx_ring[i].tx_status are released. However this is released again when the device is unbinded (ath12k_pci), and we get: WARNING: CPU: 0 PID: 2098 at mm/slub.c:4689 free_large_kmalloc+0x4d/0x80 Call Trace: free_large_kmalloc ath12k_dp_free ath12k_core_deinit ath12k_pci_remove ... The issue is always reproducible from a VM because the MSI addressing initialization is failing. In order to fix the issue, just set the buffers to NULL after releasing in order to avoid the double free.
Title wifi: ath12k: fix warning when unbinding
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-12-27T13:49:33.617Z

Updated: 2025-10-01T20:07:20.969Z

Reserved: 2024-11-19T17:17:25.013Z

Link: CVE-2024-53191

cve-icon Vulnrichment

Updated: 2025-10-01T15:37:29.430Z

cve-icon NVD

Status : Modified

Published: 2024-12-27T14:15:26.657

Modified: 2025-10-01T20:17:18.737

Link: CVE-2024-53191

cve-icon Redhat

Severity : Important

Publid Date: 2024-12-27T00:00:00Z

Links: CVE-2024-53191 - Bugzilla