CVE-2023-52593 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the return value before examining skb data. So convert the latter to return an appropriate error code and propagate it to return from 'wfx_start_ap()' as well. Compile tested only.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878
https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03
https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132
https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d
https://lore.kernel.org/linux-cve-announce/2024030645-CVE-2023-52593-14ef@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52593
https://www.cve.org/CVERecord?id=CVE-2023-52593

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-03-06T06:45:24.551Z

Updated: 2024-08-27T15:03:29.606Z

Reserved: 2024-03-02T21:55:42.571Z

Link: CVE-2023-52593

Vulnrichment

Updated: 2024-08-02T23:03:21.203Z

NVD

Status : Awaiting Analysis

Published: 2024-03-06T07:15:08.940

Modified: 2024-03-06T15:18:08.093

Link: CVE-2023-52593

Redhat

Severity : Low

Publid Date: 2024-03-06T00:00:00Z

Links: CVE-2023-52593 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52593", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-03-02T21:55:42.571Z", "datePublished": "2024-03-06T06:45:24.551Z", "dateUpdated": "2024-08-27T15:03:29.606Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:14:05.491Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()\n\nSince 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()'\nshould check the return value before examining skb data. So convert\nthe latter to return an appropriate error code and propagate it to\nreturn from 'wfx_start_ap()' as well. Compile tested only."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/silabs/wfx/sta.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "574dcd3126aa", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "9ab224744a47", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "3739121443f5", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "fe0a7776d4d1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/wireless/silabs/wfx/sta.c"], "versions": [{"version": "6.1.77", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.6.16", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.7.4", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03"}, {"url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132"}, {"url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878"}, {"url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d"}], "title": "wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:21.203Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-27T14:56:35.440963Z", "id": "CVE-2023-52593", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-27T15:03:29.606Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:21.203Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52593", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-27T14:56:35.440963Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-27T15:03:25.717Z"}}], "cna": {"title": "wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "574dcd3126aa", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "9ab224744a47", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "3739121443f5", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "fe0a7776d4d1", "versionType": "git"}], "programFiles": ["drivers/net/wireless/silabs/wfx/sta.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "6.1.77", "versionType": "custom", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.16", "versionType": "custom", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.4", "versionType": "custom", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/wireless/silabs/wfx/sta.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03"}, {"url": "https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132"}, {"url": "https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878"}, {"url": "https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()\n\nSince 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()'\nshould check the return value before examining skb data. So convert\nthe latter to return an appropriate error code and propagate it to\nreturn from 'wfx_start_ap()' as well. Compile tested only."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:14:05.491Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52593", "state": "PUBLISHED", "dateUpdated": "2024-08-27T15:03:29.606Z", "dateReserved": "2024-03-02T21:55:42.571Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-03-06T06:45:24.551Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}