What’s Vulnerable › Vulnerabilities

CVE-2023-53251: wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-15 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() rxq can be NULL only when trans_pcie->rxq is NULL and entry->entry is zero. For the case when entry->entry is not equal to 0, rxq won't be NULL even if trans_pcie->rxq is NULL. Modify checker to check for trans_pcie->rxq.

Affected products

• Linux kernel: from 5.12 before 5.15.121; from 5.16 before 6.1.39; from 6.2 before 6.3.13; from 6.4 before 6.4.4 — fixed in 5.15.121, 6.1.39, 6.3.13, 6.4.4

How to fix

Upgrade to a fixed version: Linux kernel 5.15.121, 6.1.39, 6.3.13, 6.4.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1902f1953b8ba100ee8705cb8a6f1a9795550eca
• https://git.kernel.org/stable/c/2d690495eb2766d58e25c83676f422219c4fcf18
• https://git.kernel.org/stable/c/390e44efcf4d390b5053ad112553155d2d097c73
• https://git.kernel.org/stable/c/3b9de981fe7f1c6e07c7b852421ad69be3d4b6c2
• https://git.kernel.org/stable/c/f71d0fc407dd028416bec002ddcc62f5acb0346a

Get alerted when CVE-2023-53251 or the next vulnerability affects your stack