CVE-2023-53554

Summary

In the Linux kernel, the following vulnerability has been resolved:

staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()

The "exc->key_len" is a u16 that comes from the user. If it's over IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxb121d84882b97b8668be0b95e9ba50cfd01aa0f1 < 9496fb96ddeb740dc6b966f4a7d8dfb8b93921c6affected
LinuxLinuxb121d84882b97b8668be0b95e9ba50cfd01aa0f1 < 663fff29fd613e2b0d30c4138157312ba93c4939affected
LinuxLinuxb121d84882b97b8668be0b95e9ba50cfd01aa0f1 < 5373a1aa91b2298f9305794b8270cf9896be96b6affected
LinuxLinuxb121d84882b97b8668be0b95e9ba50cfd01aa0f1 < caac4b6c15b66feae4d83f602e1e46f124540202affected
LinuxLinuxb121d84882b97b8668be0b95e9ba50cfd01aa0f1 < baf420e30364ef9efe3e29a5c0e01e612aebf3feaffected
LinuxLinuxb121d84882b97b8668be0b95e9ba50cfd01aa0f1 < 7ae9f55a495077f838bab466411ee6f38574df9baffected
LinuxLinuxb121d84882b97b8668be0b95e9ba50cfd01aa0f1 < b1b04b56745bc79286c80aa876fabfab1e08ebf1affected
LinuxLinuxb121d84882b97b8668be0b95e9ba50cfd01aa0f1 < 5f1c7031e044cb2fba82836d55cc235e2ad619dcaffected
LinuxLinux4.12affected
LinuxLinux0 < 4.12unaffected
LinuxLinux4.14.322 <= 4.14.*unaffected
LinuxLinux4.19.291 <= 4.19.*unaffected
LinuxLinux5.4.253 <= 5.4.*unaffected
LinuxLinux5.10.190 <= 5.10.*unaffected
LinuxLinux5.15.124 <= 5.15.*unaffected
LinuxLinux6.1.43 <= 6.1.*unaffected
LinuxLinux6.4.8 <= 6.4.*unaffected
LinuxLinux6.5 <= *unaffected

Weaknesses

References