CVE-2023-54191 wifi: mt76: mt7996: fix memory leak in mt7996_mcu_exit
A memory leak in the mt7996 Wi-Fi driver allows attackers to cause a denial of service by exhausting kernel memory.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-54191?
CVE-2023-54191 is a memory corruption vulnerability in Linux, published on 30 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: fix memory leak in mt7996_mcu_exit
Always purge mcu skb queues in mt7996_mcu_exit routine even if mt7996_firmware_state fails.
Which versions are affected by CVE-2023-54191?
How do I fix CVE-2023-54191?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-54191 being exploited?
There is no known exploitation of CVE-2023-54191 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2023-54191, GHSA-5gfv-jw63-2f46, UBUNTU-CVE-2023-54191.