Riskcovery

CVE-2023-52593

wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()

State
Published
Severity
Not scored
Published
Mar 6, 2024
Updated
May 11, 2026
Reserved
Mar 2, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()

Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the return value before examining skb data. So convert the latter to return an appropriate error code and propagate it to return from 'wfx_start_ap()' as well. Compile tested only.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 268bceec1684932e194ae87877dcc73f534d921c to before 574dcd3126aa2eed75437137843f254b1190dd03Affected
  • 268bceec1684932e194ae87877dcc73f534d921c to before 9ab224744a47363f74ea29c6894c405e3bcf5132Affected
  • 268bceec1684932e194ae87877dcc73f534d921c to before 3739121443f5114c6bcf6d841a5124deb006b878Affected
  • 268bceec1684932e194ae87877dcc73f534d921c to before fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49dAffected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 6.1.77 through 6.1.*Not affected
  • 6.6.16 through 6.6.*Not affected
  • 6.7.4 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.