CVE-2023-52525

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

HIGH

7.1

CVSS Score

Published: March 2, 2024 at 09:52 PM UTC

Updated: June 17, 2026 at 06:42 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.1

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet Only skip the code path trying to access the rfc1042 headers when the buffer is too small, so the driver can still process packets without rfc1042 headers.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 6.4.164.14.326 ≤ v < 4.14.3274.19.295 ≤ v < 4.19.2965.10.195 ≤ v < 5.10.1985.15.132 ≤ v < 5.15.1355.4.257 ≤ v < 5.4.2586.1.53 ≤ v < 6.1.576.4.16 ≤ v < 6.56.5.3 ≤ v < 6.5.711958528161731c58e105b501ed60b83a91ea94129eca8b7863d1d7de6c5b746b374e3487d14f1543975e21d4d01efaf0296ded40d11c06589c492453fe3923d092e22d87d1ed03e2729db444b8c13314.14.326 4.19.295 5.10.195 5.15.132 5.4.257 6.1.53 6.4.16 6.5.3650d1bc02fba7b42f476d8b6643324abac5921ed7c54b6fc39eb1aac51cf2945f8a25e2a47fdca028824aa4ab62c800f75d96f48e1883a5f56ec5869a7300e3800e9fd5405e88ce67709c1a97783b9c8f517c97fc129995de77dd06aa5a74f909ebf568f

Vendor states this is fixed in 10a18c8bac7f60d32b7af22da03b66f350beee38 (fixed)

Vendor states this is fixed in 16cc18b9080892d1a0200a38e36ae52e464bc555 (fixed)

Vendor states this is fixed in 5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6 (fixed)

Vendor states this is fixed in 6b706286473db4fd54b5f869faa67f4a8cb18e99 (fixed)

Vendor states this is fixed in 71b1d2b57f145c8469aa9346f0fd57bf59b2b89c (fixed)

Vendor states this is fixed in aef7a0300047e7b4707ea0411dc9597cba108fc8 (fixed)

Vendor states this is fixed in b8e260654a29de872e7cb85387d8ab8974694e8e (fixed)

Vendor states this is fixed in be2ff39b1504c5359f4a083c1cfcad21d666e216 (fixed)

Affected range stops below 4.14.327, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.296, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.10.198, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.15.135, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.258, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.1.57, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.5, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.5.7, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references