Log in Start free

Vulnerability · Published Mar 6, 2024 · Assigned by Linux

CVE-2023-52593wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 87.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the return value before examining skb data. So convert the latter to return an appropriate error code and propagate it to return from 'wfx_start_ap()' as well. Compile tested only.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.82-1DEBIAN-CVE-2023-52593
Debian:13linux6.7.7-1DEBIAN-CVE-2023-52593
Debian:14linux6.7.7-1DEBIAN-CVE-2023-52593
Ubuntu:22.04:LTSlinux5.15.0-160.170USN-7829-1
Ubuntu:22.04:LTSlinux5.15.0-160.170UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-aws5.15.0-1095.102UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-aws5.15.0-1095.102USN-7829-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-azure5.15.0-1098.107USN-7829-3
Ubuntu:22.04:LTSlinux-azure5.15.0-1098.107UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1022.23~22.04.1UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1022.23~22.04.1USN-6819-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1098.107.1UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-gcp5.15.0-1095.104USN-7829-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1095.104UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1022.24~22.04.1USN-6818-1
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1022.24~22.04.1UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-gke5.15.0-1091.97UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-gke5.15.0-1091.97USN-7829-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1078.86USN-7829-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1078.86UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-41.41~22.04.2UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-41.41~22.04.2USN-6818-4
Ubuntu:22.04:LTSlinux-ibm5.15.0-1089.92UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-ibm5.15.0-1089.92USN-7829-1
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1090.96USN-7829-5
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1090.96UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-kvm5.15.0-1089.94UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-kvm5.15.0-1089.94USN-7933-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-160.170USN-7829-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-160.170UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-41.41.1~22.04.1USN-6818-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-41.41.1~22.04.1UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1090.91UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1090.91USN-7829-1
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1021.22USN-6818-3
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1021.22UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1047.47UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1047.47USN-7829-6
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1036.36USN-7829-6
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1036.36UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1035.35USN-6688-1
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1035.35UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1024.25USN-6819-3
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1024.25UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-oracle5.15.0-1092.98USN-7829-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1092.98UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1024.24~22.04.1UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1024.24~22.04.1USN-6819-4
Ubuntu:22.04:LTSlinux-raspi5.15.0-1089.92USN-7829-6
Ubuntu:22.04:LTSlinux-raspi5.15.0-1089.92UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-riscv-6.56.5.0-40.40.1~22.04.1UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1015.16~22.04.1USN-6819-1
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1015.16~22.04.1UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1059.63UBUNTU-CVE-2023-52593
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1059.63USN-7829-1

Affected products (as reported)

VendorProductVersions
Linux Linux 268bceec1684932e194ae87877dcc73f534d921c – before 574dcd3126aa2eed75437137843f254b1190dd03268bceec1684932e194ae87877dcc73f534d921c – before 9ab224744a47363f74ea29c6894c405e3bcf5132268bceec1684932e194ae87877dcc73f534d921c – before 3739121443f5114c6bcf6d841a5124deb006b878268bceec1684932e194ae87877dcc73f534d921c – before fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d
Linux Linux 5.10

References