CVE-2026-53113: wifi: ath11k: fix memory leaks in beacon template setup
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix memory leaks in beacon template setup
The functions ath11kmacsetupbcntmplema() and ath11kmacsetupbcntmplmbssid() allocate memory for beacon templates but fail to free it when parameter setup returns an error.
Since beacon templates must be released during normal execution, they must also be released in the error handling paths to prevent memory leaks.
Fix this by using unified exit paths with proper cleanup in the respective error paths.
Compile tested only. Issue found using a prototype static analysis tool and code review.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the Linux kernel fix for “wifi: ath11k: fix memory leaks in beacon template setup” so that ath11k_mac_setup_bcn_tmpl_ema() and ath11k_mac_setup_bcn_tmpl_mbssid() free allocated beacon template memory on error/unified exit paths when parameter setup returns an error.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53113?
CVE-2026-53113 has a risk rating of 12, indicating a significant impact.
How do I fix CVE-2026-53113?
To fix CVE-2026-53113, update your Linux kernel to a version that includes the patches addressing the memory leak.
What systems are affected by CVE-2026-53113?
CVE-2026-53113 affects the ath11k driver in the Linux kernel.
What is the main issue described in CVE-2026-53113?
CVE-2026-53113 describes memory leaks occurring during the setup of beacon templates in the ath11k driver.
Is CVE-2026-53113 a remote code execution vulnerability?
No, CVE-2026-53113 is not a remote code execution vulnerability; it primarily involves memory management issues.