CVE-2023-53721: wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-22 · updated 2026-10-28

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan() In ath12k_mac_op_hw_scan(), the return value of kzalloc() is directly used in memcpy(), which may lead to a NULL pointer dereference on failure of kzalloc(). Fix this bug by adding a check of arg.extraie.ptr. Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0-03427-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.15378.4

Affected products

Linux kernel: 6.3 — fixed in 6.6

How to fix

Upgrade to a fixed version: Linux kernel 6.6. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-53721 or the next vulnerability affects your stack