Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the return value before examining skb data. So convert the latter to return an appropriate error code and propagate it to return from 'wfx_start_ap()' as well. Compile tested only.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 6.1.77 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878Patch
- https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03Patch
- https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132Patch
- https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49dPatch
- https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878Patch
- https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03Patch
- https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132Patch
- https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49dPatch
FAQ
What is CVE-2023-52593?
CVE-2023-52593 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_...
How severe is CVE-2023-52593?
CVE-2023-52593 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-52593?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.