What’s Vulnerable › Vulnerabilities

CVE-2023-52593: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-06 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the return value before examining skb data. So convert the latter to return an appropriate error code and propagate it to return from 'wfx_start_ap()' as well. Compile tested only.

Affected products

• Linux kernel: before 6.1.77; from 6.2 before 6.6.16; from 6.7 before 6.7.4 — fixed in 6.1.77, 6.6.16, 6.7.4

How to fix

Upgrade to a fixed version: Linux kernel 6.1.77, 6.6.16, 6.7.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878
• https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03
• https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132
• https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d
• https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878
• https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03
• https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132
• https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d

Get alerted when CVE-2023-52593 or the next vulnerability affects your stack