vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-53229

wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta

MEDIUM
5.5
CVSS Score
Published: September 15, 2025 at 02:22 PM UTC
Updated: August 5, 2026 at 10:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta Avoid potential data corruption issues caused by uninitialized driver private data structures.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
3.14 ≤ v < 4.14.3133.14 ≤ v < 4.19.2813.14 ≤ v < 5.10.1783.14 ≤ v < 5.15.1073.14 ≤ v < 5.4.2413.14 ≤ v < 6.1.243.14 ≤ v < 6.2.113.14 ≤ v < 6.34.15 ≤ v < 4.19.2814.20 ≤ v < 5.4.2415.11 ≤ v < 5.15.1075.16 ≤ v < 6.1.245.5 ≤ v < 5.10.1786.2 ≤ v < 6.2.116.3 rc16.3 rc26.3 rc36.3 rc46.3 rc56a9d1b91f34df1935bc0ad98114801a44db0f98c
Vendor states this is fixed in 022c8320d9eb7394538bd716fa1a07a5ed92621b (fixed)
Vendor states this is fixed in 12b220a6171faf10638ab683a975cadcf1a352d6 (fixed)
Vendor states this is fixed in 30c5a016a37a668c1c07442cf94de6e99ea7417a (fixed)
Vendor states this is fixed in 3fe20515449a80a177526d2ecd13b43f6ee41aeb (fixed)
Vendor states this is fixed in 73752a39e2a6e38eee3ba90ece2ded598ea88006 (fixed)
Vendor states this is fixed in 7e68d7c640d41d8a371b8f6c2d2682ea437cbe21 (fixed)
Vendor states this is fixed in a3593082e0dadf87f17ea4ca9fa0210caaa2aebf (fixed)
Vendor states this is fixed in db8d32d6b25fdb75c387daee496b96209d477780 (fixed)
Vendor states this is fixed in 3.14 (unaffected)
Vendor states this is fixed in 4.14.313 (unaffected)
Vendor states this is fixed in 4.19.281 (unaffected)
Vendor states this is fixed in 5.10.178 (unaffected)
Vendor states this is fixed in 5.15.107 (unaffected)
Vendor states this is fixed in 5.4.241 (unaffected)
Vendor states this is fixed in 6.1.24 (unaffected)
Vendor states this is fixed in 6.2.11 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)

References (8)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/022c8320d9eb7394538bd716fa1a07a5ed92621b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/12b220a6171faf10638ab683a975cadcf1a352d6
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/30c5a016a37a668c1c07442cf94de6e99ea7417a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3fe20515449a80a177526d2ecd13b43f6ee41aeb
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/73752a39e2a6e38eee3ba90ece2ded598ea88006
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7e68d7c640d41d8a371b8f6c2d2682ea437cbe21
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a3593082e0dadf87f17ea4ca9fa0210caaa2aebf
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/db8d32d6b25fdb75c387daee496b96209d477780

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card