Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan() In ath12k_mac_op_hw_scan(), the return value of kzalloc() is directly used in memcpy(), which may lead to a NULL pointer dereference on failure of kzalloc(). Fix this bug by adding a check of arg.extraie.ptr. Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0-03427-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.15378.4
References
- https://git.kernel.org/stable/c/5a263df398b581189fe632b4ab8440f3dd76c251
- https://git.kernel.org/stable/c/8ad314da54c6dd223a6b6cc85019160aa842f659
FAQ
What is CVE-2023-53721?
CVE-2023-53721 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan() In ath12k_mac_op_hw_scan(), the return value of kzalloc() ...
How severe is CVE-2023-53721?
CVSS scoring is not yet available for CVE-2023-53721. Check NVD for updates.
Is there a patch for CVE-2023-53721?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.