OpenCVE

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the return value before examining skb data. So convert the latter to return an appropriate error code and propagate it to return from 'wfx_start_ap()' as well. Compile tested only.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878
https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03
https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132
https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d
https://lore.kernel.org/linux-cve-announce/2024030645-CVE-2023-52593-14ef@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52593
https://www.cve.org/CVERecord?id=CVE-2023-52593

History

Mon, 04 Nov 2024 13:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-03-06T06:45:24.551Z

Updated: 2024-11-04T14:49:20.690Z

Reserved: 2024-03-02T21:55:42.571Z

Link: CVE-2023-52593

Vulnrichment

Updated: 2024-08-02T23:03:21.203Z

NVD

Status : Awaiting Analysis

Published: 2024-03-06T07:15:08.940

Modified: 2024-11-21T08:40:08.590

Link: CVE-2023-52593

Redhat

Severity : Low

Publid Date: 2024-03-06T00:00:00Z

Links: CVE-2023-52593 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52593", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-03-02T21:55:42.571Z", "datePublished": "2024-03-06T06:45:24.551Z", "dateUpdated": "2024-11-04T14:49:20.690Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:49:20.690Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()\n\nSince 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()'\nshould check the return value before examining skb data. So convert\nthe latter to return an appropriate error code and propagate it to\nreturn from 'wfx_start_ap()' as well. Compile tested only."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/silabs/wfx/sta.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "574dcd3126aa", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "9ab224744a47", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "3739121443f5", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "fe0a7776d4d1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/silabs/wfx/sta.c"], "versions": [{"version": "6.1.77", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.16", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.4", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03"}, {"url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132"}, {"url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878"}, {"url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d"}], "title": "wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:21.203Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-27T14:56:35.440963Z", "id": "CVE-2023-52593", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-27T15:03:29.606Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:21.203Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52593", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-27T14:56:35.440963Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-27T15:03:25.717Z"}}], "cna": {"title": "wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "574dcd3126aa", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "9ab224744a47", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "3739121443f5", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "fe0a7776d4d1", "versionType": "git"}], "programFiles": ["drivers/net/wireless/silabs/wfx/sta.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "6.1.77", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.16", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.4", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/wireless/silabs/wfx/sta.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03"}, {"url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132"}, {"url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878"}, {"url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()\n\nSince 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()'\nshould check the return value before examining skb data. So convert\nthe latter to return an appropriate error code and propagate it to\nreturn from 'wfx_start_ap()' as well. Compile tested only."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:34:11.842Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52593", "state": "PUBLISHED", "dateUpdated": "2024-11-04T12:34:11.842Z", "dateReserved": "2024-03-02T21:55:42.571Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-03-06T06:45:24.551Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()\n\nSince 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()'\nshould check the return value before examining skb data. So convert\nthe latter to return an appropriate error code and propagate it to\nreturn from 'wfx_start_ap()' as well. Compile tested only."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: wifi: wfx: corrige la posible desreferencia del puntero NULL en wfx_set_mfp_ap() Dado que 'ieee80211_beacon_get()' puede devolver NULL, 'wfx_set_mfp_ap()' debe verificar el valor de retorno antes de examinar los datos de skb. As\u00ed que convierta este \u00faltimo para que devuelva un c\u00f3digo de error apropiado y prop\u00e1guelo para que regrese tambi\u00e9n desde 'wfx_start_ap()'. Compilaci\u00f3n probada \u00fanicamente."}], "id": "CVE-2023-52593", "lastModified": "2024-11-21T08:40:08.590", "metrics": {}, "published": "2024-03-06T07:15:08.940", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}