CVE-2023-53554

staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()

State: Published
Severity: 7.8 High
Published: Oct 4, 2025
Updated: Aug 5, 2026
Reserved: Oct 4, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()

The "exc->key_len" is a u16 that comes from the user. If it's over IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 9496fb96ddeb740dc6b966f4a7d8dfb8b93921c6Affected b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 663fff29fd613e2b0d30c4138157312ba93c4939Affected b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 5373a1aa91b2298f9305794b8270cf9896be96b6Affected b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before caac4b6c15b66feae4d83f602e1e46f124540202Affected b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before baf420e30364ef9efe3e29a5c0e01e612aebf3feAffected b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 7ae9f55a495077f838bab466411ee6f38574df9bAffected b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before b1b04b56745bc79286c80aa876fabfab1e08ebf1Affected b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 5f1c7031e044cb2fba82836d55cc235e2ad619dcAffected
LinuxLinux	4.12Affected before 4.12Not affected 4.14.322 through 4.14.Not affected 4.19.291 through 4.19.Not affected 5.4.253 through 5.4.Not affected 5.10.190 through 5.10.Not affected 5.15.124 through 5.15.Not affected 6.1.43 through 6.1.Not affected 6.4.8 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 9496fb96ddeb740dc6b966f4a7d8dfb8b93921c6Affected
b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 663fff29fd613e2b0d30c4138157312ba93c4939Affected
b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 5373a1aa91b2298f9305794b8270cf9896be96b6Affected
b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before caac4b6c15b66feae4d83f602e1e46f124540202Affected
b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before baf420e30364ef9efe3e29a5c0e01e612aebf3feAffected
b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 7ae9f55a495077f838bab466411ee6f38574df9bAffected
b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before b1b04b56745bc79286c80aa876fabfab1e08ebf1Affected
b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to before 5f1c7031e044cb2fba82836d55cc235e2ad619dcAffected

LinuxLinux

4.12Affected
before 4.12Not affected
4.14.322 through 4.14.*Not affected
4.19.291 through 4.19.*Not affected
5.4.253 through 5.4.*Not affected
5.10.190 through 5.10.*Not affected
5.15.124 through 5.15.*Not affected
6.1.43 through 6.1.*Not affected
6.4.8 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.