CVE-2023-52593: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
In the Linux kernel, the following vulnerability has been resolved:
wifi: wfx: fix possible NULL pointer dereference in wfxsetmfpap()
Since 'ieee80211beaconget()' can return NULL, 'wfxsetmfpap()' should check the return value before examining skb data. So convert the latter to return an appropriate error code and propagate it to return from 'wfxstartap()' as well. Compile tested only.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.173.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52593?
CVE-2023-52593 has a severity rating that indicates it could lead to a potential NULL pointer dereference issue in the Linux kernel.
How do I fix CVE-2023-52593?
To fix CVE-2023-52593, update to a patched version of the Linux kernel, specifically versions 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which versions of Linux are affected by CVE-2023-52593?
CVE-2023-52593 affects all versions of the Linux kernel below 6.1.77 and between 6.2 and 6.6.16, as well as between 6.7 and 6.7.4.
What type of vulnerability is CVE-2023-52593?
CVE-2023-52593 is a vulnerability that can potentially allow for a NULL pointer dereference in the Linux wireless subsystem.
Is there a public reference for CVE-2023-52593?
Yes, CVE-2023-52593 is documented in public repositories, including changes made to the Linux kernel in response to the vulnerability.