CVE-2023-53226

wifi: mwifiex: Fix OOB and integer underflow when rx packets

State: Published
Severity: 8.8 High
Published: Sep 15, 2025
Updated: Aug 5, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: Fix OOB and integer underflow when rx packets

Make sure mwifiex_process_mgmt_packet, mwifiex_process_sta_rx_packet and mwifiex_process_uap_rx_packet, mwifiex_uap_queue_bridged_pkt and mwifiex_process_rx_packet not out-of-bounds access the skb->data buffer.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-191 Integer Underflow (Wrap or Wraparound)

Affected Products

Product	Versions
LinuxLinux	2dbaf751b1dec3a603130a475f94cc4d3f404362 to before f517c97fc129995de77dd06aa5a74f909ebf568fAffected 2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 8824aa4ab62c800f75d96f48e1883a5f56ec5869Affected 2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 29eca8b7863d1d7de6c5b746b374e3487d14f154Affected 2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 3fe3923d092e22d87d1ed03e2729db444b8c1331Affected 2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 7c54b6fc39eb1aac51cf2945f8a25e2a47fdca02Affected 2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 3975e21d4d01efaf0296ded40d11c06589c49245Affected 2dbaf751b1dec3a603130a475f94cc4d3f404362 to before a7300e3800e9fd5405e88ce67709c1a97783b9c8Affected 2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 650d1bc02fba7b42f476d8b6643324abac5921edAffected 2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 11958528161731c58e105b501ed60b83a91ea941Affected
LinuxLinux	3.7Affected before 3.7Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

2dbaf751b1dec3a603130a475f94cc4d3f404362 to before f517c97fc129995de77dd06aa5a74f909ebf568fAffected
2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 8824aa4ab62c800f75d96f48e1883a5f56ec5869Affected
2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 29eca8b7863d1d7de6c5b746b374e3487d14f154Affected
2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 3fe3923d092e22d87d1ed03e2729db444b8c1331Affected
2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 7c54b6fc39eb1aac51cf2945f8a25e2a47fdca02Affected
2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 3975e21d4d01efaf0296ded40d11c06589c49245Affected
2dbaf751b1dec3a603130a475f94cc4d3f404362 to before a7300e3800e9fd5405e88ce67709c1a97783b9c8Affected
2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 650d1bc02fba7b42f476d8b6643324abac5921edAffected
2dbaf751b1dec3a603130a475f94cc4d3f404362 to before 11958528161731c58e105b501ed60b83a91ea941Affected

LinuxLinux

3.7Affected
before 3.7Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.