CVE-2023-52525

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

State: Published
Severity: Not scored
Published: Mar 2, 2024
Updated: May 23, 2026
Reserved: Feb 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

Only skip the code path trying to access the rfc1042 headers when the buffer is too small, so the driver can still process packets without rfc1042 headers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f517c97fc129995de77dd06aa5a74f909ebf568f to before 71b1d2b57f145c8469aa9346f0fd57bf59b2b89cAffected 8824aa4ab62c800f75d96f48e1883a5f56ec5869 to before 16cc18b9080892d1a0200a38e36ae52e464bc555Affected 29eca8b7863d1d7de6c5b746b374e3487d14f154 to before b8e260654a29de872e7cb85387d8ab8974694e8eAffected 3fe3923d092e22d87d1ed03e2729db444b8c1331 to before 10a18c8bac7f60d32b7af22da03b66f350beee38Affected 7c54b6fc39eb1aac51cf2945f8a25e2a47fdca02 to before 5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6Affected 3975e21d4d01efaf0296ded40d11c06589c49245 to before 6b706286473db4fd54b5f869faa67f4a8cb18e99Affected 650d1bc02fba7b42f476d8b6643324abac5921ed to before be2ff39b1504c5359f4a083c1cfcad21d666e216Affected 11958528161731c58e105b501ed60b83a91ea941 to before aef7a0300047e7b4707ea0411dc9597cba108fc8Affected a7300e3800e9fd5405e88ce67709c1a97783b9c8Affected 6.4.16 to before 6.5Affected
LinuxLinux	4.14.326 to before 4.14.327Affected 4.19.295 to before 4.19.296Affected 5.4.257 to before 5.4.258Affected 5.10.195 to before 5.10.198Affected 5.15.132 to before 5.15.135Affected 6.1.53 to before 6.1.57Affected 6.5.3 to before 6.5.7Affected

Product

Versions

LinuxLinux

f517c97fc129995de77dd06aa5a74f909ebf568f to before 71b1d2b57f145c8469aa9346f0fd57bf59b2b89cAffected
8824aa4ab62c800f75d96f48e1883a5f56ec5869 to before 16cc18b9080892d1a0200a38e36ae52e464bc555Affected
29eca8b7863d1d7de6c5b746b374e3487d14f154 to before b8e260654a29de872e7cb85387d8ab8974694e8eAffected
3fe3923d092e22d87d1ed03e2729db444b8c1331 to before 10a18c8bac7f60d32b7af22da03b66f350beee38Affected
7c54b6fc39eb1aac51cf2945f8a25e2a47fdca02 to before 5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6Affected
3975e21d4d01efaf0296ded40d11c06589c49245 to before 6b706286473db4fd54b5f869faa67f4a8cb18e99Affected
650d1bc02fba7b42f476d8b6643324abac5921ed to before be2ff39b1504c5359f4a083c1cfcad21d666e216Affected
11958528161731c58e105b501ed60b83a91ea941 to before aef7a0300047e7b4707ea0411dc9597cba108fc8Affected
a7300e3800e9fd5405e88ce67709c1a97783b9c8Affected
6.4.16 to before 6.5Affected

LinuxLinux

4.14.326 to before 4.14.327Affected
4.19.295 to before 4.19.296Affected
5.4.257 to before 5.4.258Affected
5.10.195 to before 5.10.198Affected
5.15.132 to before 5.15.135Affected
6.1.53 to before 6.1.57Affected
6.5.3 to before 6.5.7Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.