PT-2025-54020 · Linux+3 · Linux Kernel+3

Published 2023-02-03 · Updated 2026-01-01 · CVE-2023-54191

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was identified and resolved in the mt7996 mcu exit routine within the mt76 module for the mt7996 wireless chipset. The issue involved failing to properly purge memory queues (skb queues) when the mt7996 firmware state function failed. This could lead to a gradual consumption of system memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

BDU:2026-01202

CVE-2023-54191

RHSA-2023:6583

RHSA-2023:7077

Affected Products

Centos

Linux Kernel

Red Hat

Mt7996

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54191.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54191 · Security Note
• https://osv.dev/vulnerability/CVE-2023-54191 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54191 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54191 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54191 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54191 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01202 · Security Note
• https://git.kernel.org/stable/c/da5b4d93e141b52c5a71d0c41a042d1bcaf70d2e · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54191 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://lore.kernel.org/linux-cve-announce/2025123027-CVE-2023-54191-3204@gregkh/T · Note
• https://git.kernel.org/linus/da5b4d93e141b52c5a71d0c41a042d1bcaf70d2e · Note
• https://access.redhat.com/security/cve/cve-2023-54191 · Note
• https://lore.kernel.org/linux-cve-announce/2025123027-CVE-2023-54191-3204@gregkh · Note