CVE-2023-53384

wifi: mwifiex: avoid possible NULL skb pointer dereference

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: avoid possible NULL skb pointer dereference

In 'mwifiex_handle_uap_rx_forward()', always check the value returned by 'skb_copy()' to avoid potential NULL pointer dereference in 'mwifiex_uap_queue_bridged_pkt()', and drop original skb in case of copying failure.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before d155c5f64cefacdc6a9a26d40be53ee2903c28ffAffected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 139d285e7695279f030dbb172e2d0245425c86c6Affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 231086e6a36316b823654f4535653f22d6344420Affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before bef85d58f7709896ed8426560ad117a73a37762fAffected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before d7fd24b8d1bb54c5bcf583139e11a5e651e0263cAffected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 7e7197e4d6a1bc72a774590d8765909f898be1dcAffected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 0c57f9ad2c3ed43abb764b0247d610ff7fdb7a00Affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before c2509f7c37355e1f0bd5b7087815b845fd383723Affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 35a7a1ce7c7d61664ee54f5239a1f120ab95a87eAffected
LinuxLinux	3.7Affected before 3.7Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before d155c5f64cefacdc6a9a26d40be53ee2903c28ffAffected
838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 139d285e7695279f030dbb172e2d0245425c86c6Affected
838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 231086e6a36316b823654f4535653f22d6344420Affected
838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before bef85d58f7709896ed8426560ad117a73a37762fAffected
838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before d7fd24b8d1bb54c5bcf583139e11a5e651e0263cAffected
838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 7e7197e4d6a1bc72a774590d8765909f898be1dcAffected
838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 0c57f9ad2c3ed43abb764b0247d610ff7fdb7a00Affected
838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before c2509f7c37355e1f0bd5b7087815b845fd383723Affected
838e4f44929782a2163c7bc95a7cd2da5d8b47f9 to before 35a7a1ce7c7d61664ee54f5239a1f120ab95a87eAffected

LinuxLinux

3.7Affected
before 3.7Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.