CVE-2023-52832

wifi: mac80211: don't return unset power in ieee80211_get_tx_power()

State: Published
Severity: 9.1 Critical
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: don't return unset power in ieee80211_get_tx_power()

We can get a UBSAN warning if ieee80211_get_tx_power() returns the INT_MIN value mac80211 internally uses for "unset power level".

UBSAN: signed-integer-overflow in net/wireless/nl80211.c:3816:5 -2147483648 * 100 cannot be represented in type 'int' CPU: 0 PID: 20433 Comm: insmod Tainted: G WC OE Call Trace: dump_stack+0x74/0x92 ubsan_epilogue+0x9/0x50 handle_overflow+0x8d/0xd0 __ubsan_handle_mul_overflow+0xe/0x10 nl80211_send_iface+0x688/0x6b0 [cfg80211] [...] cfg80211_register_wdev+0x78/0xb0 [cfg80211] cfg80211_netdev_notifier_call+0x200/0x620 [cfg80211] [...] ieee80211_if_add+0x60e/0x8f0 [mac80211] ieee80211_register_hw+0xda5/0x1170 [mac80211]

In this case, simply return an error instead, to indicate that no data is available.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

CWE-920 Improper Restriction of Power Consumption

Affected Products

Product	Versions
LinuxLinux	db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before 717de20abdcd1d4993fa450e28b8086a352620eaAffected db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before 21a0f310a9f3bfd2b4cf4f382430e638607db846Affected db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before 2be24c47ac19bf639c48c082486c08888bd603c6Affected db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before adc2474d823fe81d8da759207f4f1d3691aa775aAffected db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before 5a94cffe90e20e8fade0b9abd4370bd671fe87c7Affected db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before e160ab85166e77347d0cbe5149045cb25e83937fAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.202 through 5.10.Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.*Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before 717de20abdcd1d4993fa450e28b8086a352620eaAffected
db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before 21a0f310a9f3bfd2b4cf4f382430e638607db846Affected
db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before 2be24c47ac19bf639c48c082486c08888bd603c6Affected
db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before adc2474d823fe81d8da759207f4f1d3691aa775aAffected
db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before 5a94cffe90e20e8fade0b9abd4370bd671fe87c7Affected
db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde to before e160ab85166e77347d0cbe5149045cb25e83937fAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.202 through 5.10.*Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.