Riskcovery

CVE-2023-53721

wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()

State
Published
Severity
Not scored
Published
Oct 22, 2025
Updated
May 11, 2026
Reserved
Oct 22, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()

In ath12k_mac_op_hw_scan(), the return value of kzalloc() is directly used in memcpy(), which may lead to a NULL pointer dereference on failure of kzalloc().

Fix this bug by adding a check of arg.extraie.ptr.

Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0-03427-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.15378.4

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 5a263df398b581189fe632b4ab8440f3dd76c251Affected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 8ad314da54c6dd223a6b6cc85019160aa842f659Affected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.5.5 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.