CVE-2023-53257

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: check S1G action frame size

Before checking the action code, check that it even exists in the frame.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf5a4c24e689f54e66201f04d343bdd2e8a1d7923 < fedd9377dd9c71a950d432fbe1628eebfbed70a1affected
LinuxLinuxf5a4c24e689f54e66201f04d343bdd2e8a1d7923 < 7ae7a1378a119780c8c17a6b5fc03011c3bb7029affected
LinuxLinuxf5a4c24e689f54e66201f04d343bdd2e8a1d7923 < 5e030a2509be72b452b6f4a800786d43229414dbaffected
LinuxLinuxf5a4c24e689f54e66201f04d343bdd2e8a1d7923 < 19e4a47ee74718a22e963e8a647c8c3bfe8bb05caffected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux5.15.133 <= 5.15.*unaffected
LinuxLinux6.1.55 <= 6.1.*unaffected
LinuxLinux6.5.5 <= 6.5.*unaffected
LinuxLinux6.6 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References