CVE-2023-54016

What it actually does

Memory leak occurs because ath12k_dp_cc_desc_init allocates rx_descs and tx_descs buffers but ath12k_dp_cc_cleanup never frees them, allowing gradual kernel memory exhaustion on repeated descriptor initialization and cleanup cycles in the ath12k WiFi driver.

Why it matters to the business

Systems using affected Linux kernels with ath12k hardware may experience increasing memory pressure over time, leading to reduced performance, stability issues, or eventual crashes that disrupt wireless connectivity and require reboots.

How an attack unfolds

An attacker with local access or the ability to trigger WiFi interface bring-up and tear-down sequences repeatedly invokes ath12k_dp_cc_desc_init without corresponding frees in cleanup, slowly depleting available memory until the system becomes unresponsive or crashes.

How to fix it

Update to a fixed kernel containing commit e16be2d34883eecfe7fd888fcdb76c7a5db5d187 or later; for kubeadm-controlplane-controller packages apply version 1.10.2-r1 or newer from Chainguard or Wolfi repositories.

How to confirm the fix worked

Confirm the running kernel includes the fix commit or updated package version; monitor memory usage during repeated descriptor init/cleanup cycles to verify the leak is resolved.

Typical attack path

1. Obtain local access or control over WiFi interface management on a target system running an affected kernel
2. Repeatedly trigger ath12k module initialization or descriptor setup routines (e.g., via interface up/down cycles or driver reload)
3. Monitor memory consumption until exhaustion occurs, causing denial of service

How to detect it

Review kernel memory statistics and dmesg logs for repeated ath12k descriptor allocation patterns without matching frees; correlate with high uptime or frequent interface resets on affected hardware.

What your security team should do

• Apply the kernel or package updates immediately on all systems using ath12k hardware
• Prioritize systems with high uptime or frequent WiFi interface changes
• Monitor kernel memory statistics for unexpected growth in ath12k-related allocations