CVE-2023-54052
Unknown Unknown - Not Provided
Memory Leak in Linux mt7921 WiFi Driver Causing Network Disruption

Publication date: 2025-12-24

Last updated on: 2025-12-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU txs may be dropped if the frame is aggregated in AMSDU. When the problem shows up, some SKBs would be hold in driver to cause network stopped temporarily. Even if the problem can be recovered by txs timeout handling, mt7921 still need to disable txs in AMSDU to avoid this issue.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-24
Last Modified
2025-12-24
Generated
2026-06-16
AI Q&A
2025-12-24
EPSS Evaluated
2026-06-14
NVD
CVE-2023-54052
EUVD
EUVD-2023-60274
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
mt76 mt7921 *
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's mt76 wireless driver for the mt7921 device. It involves a problem where transmission status (txs) messages may be dropped when frames are aggregated using AMSDU. This causes some socket buffers (SKBs) to be held in the driver, leading to a temporary network stoppage. Although the issue can be recovered by txs timeout handling, the fix involves disabling txs in AMSDU to prevent the problem.

Impact Analysis

The impact of this vulnerability is that the network may temporarily stop working due to SKBs being held in the driver when txs messages are dropped during AMSDU aggregation. This can cause temporary network outages or interruptions in wireless connectivity.

Mitigation Strategies

To mitigate this vulnerability, disable TXS (transmit status) in AMSDU aggregation on the mt7921 driver to avoid skb leaks that cause temporary network stoppage. This can be done by applying the updated Linux kernel patch that fixes the issue or by disabling AMSDU TXS if configurable in your driver settings.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-54052. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart