CVE-2023-53226: wifi: mwifiex: Fix OOB and integer underflow when rx packets
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: Fix OOB and integer underflow when rx packets
Make sure mwifiexprocessmgmtpacket, mwifiexprocessstarxpacket and mwifiexprocessuaprxpacket, mwifiexuapqueuebridgedpkt and mwifiexprocessrxpacket not out-of-bounds access the skb->data buffer.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: Fix OOB and integer underflow when rx packets
Make sure mwifiexprocessmgmtpacket, mwifiexprocessstarxpacket and mwifiexprocessuaprxpacket, mwifiexuapqueuebridgedpkt and mwifiexprocessrxpacket not out-of-bounds access the skb-data buffer.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53226?
CVE-2023-53226 is classified as a medium severity vulnerability affecting the Linux kernel series.
How do I fix CVE-2023-53226?
To mitigate CVE-2023-53226, you should upgrade to the latest stable version of the Linux kernel that has addressed this vulnerability.
What are the affected Linux kernel versions for CVE-2023-53226?
CVE-2023-53226 affects multiple versions of the Linux kernel, particularly those from 3.7 up to recent versions before the fix is applied.
What types of attacks does CVE-2023-53226 allow for?
CVE-2023-53226 can lead to out-of-bounds access and potential remote code execution through malformed WiFi packets.
Is CVE-2023-53226 remotely exploitable?
Yes, CVE-2023-53226 can be remotely exploitable via malicious WiFi packets targeting vulnerable systems.