CVE-2023-53822: wifi: ath11k: Ignore frags from uninitialized peer in dp.

Published Dec 9, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: Ignore frags from uninitialized peer in dp.

When max virtual ap interfaces are configured in all the bands with ACS and hostapd restart is done every 60s, a crash is observed at random times. In this certain scenario, a fragmented packet is received for self peer, for which rxtid and rxfrags are not initialized in datapath. While handling this fragment, crash is observed as the rxfrag list is uninitialised and when we walk in ath11kdprxhsortfrags, skb null leads to exception.

To address this, before processing received fragments we check dpsetupdone flag is set to ensure that peer has completed its dp peer setup for fragment queue, else ignore processing the fragments.

Call trace: ath11kdpprocessrxerr+0x550/0x1084 [ath11k] ath11kdpservicesrng+0x70/0x370 [ath11k] 0xffffffc009693a04 napipoll+0x30/0xa4 netrxaction+0x118/0x270 dosoftirq+0x10c/0x244 irqexit+0x64/0xb4 handledomainirq+0x88/0xac gichandleirq+0x74/0xbc el1irq+0xf0/0x1c0 archcpuidle+0x10/0x18 doidle+0x104/0x248 cpustartupentry+0x20/0x64 restinit+0xd0/0xdc archcallrestinit+0xc/0x14 startkernel+0x480/0x4b8 Code: f9400281 f94066a2 91405021 b94a0023 (f9406401)

Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01744-QCAHKSWPLSILICONZ-1

Affected Software

1 affected component
Linux Linux kernel (ath11k)

Event History

Dec 9, 2025
CVE Published
via MITRE·01:29 AM
Data Sourced
via MITRE·01:29 AM
DescriptionSeverity
Data Sourced
via NVD·04:17 PM
DescriptionSeverity
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-53822?

CVE-2023-53822 has been classified as a moderate severity vulnerability.

2

What systems are affected by CVE-2023-53822?

CVE-2023-53822 affects the Linux kernel, specifically impacting configurations with max virtual AP interfaces.

3

How do I fix CVE-2023-53822?

To fix CVE-2023-53822, updating to a patched version of the Linux kernel is recommended.

4

What kind of impact does CVE-2023-53822 have on systems?

CVE-2023-53822 can cause system crashes when hostapd is restarted frequently.

5

Is there a workaround for CVE-2023-53822?

Currently, no specific workaround for CVE-2023-53822 has been documented besides applying the available kernel updates.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203