CVE-2023-53384
wifi: mwifiex: avoid possible NULL skb pointer dereference
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: avoid possible NULL skb pointer dereference In 'mwifiex_handle_uap_rx_forward()', always check the value returned by 'skb_copy()' to avoid potential NULL pointer dereference in 'mwifiex_uap_queue_bridged_pkt()', and drop original skb in case of copying failure. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Timeline
ID reserved
By Linux
- 1 day later
· 1 day later
Published
- 8 months later
· 8 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.15% · top 96% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 – < d155c5f64cefacdc6a9a26d40be53ee2903c28ff
- affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 – < 139d285e7695279f030dbb172e2d0245425c86c6
- affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 – < 231086e6a36316b823654f4535653f22d6344420
- affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 – < bef85d58f7709896ed8426560ad117a73a37762f
- affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 – < d7fd24b8d1bb54c5bcf583139e11a5e651e0263c
- affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 – < 7e7197e4d6a1bc72a774590d8765909f898be1dc
- affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 – < 0c57f9ad2c3ed43abb764b0247d610ff7fdb7a00
- affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 – < c2509f7c37355e1f0bd5b7087815b845fd383723
- affected 838e4f44929782a2163c7bc95a7cd2da5d8b47f9 – < 35a7a1ce7c7d61664ee54f5239a1f120ab95a87e
- affected 3.7
- unaffected < 3.7
- unaffected 4.14.326 – ≤ 4.14.*
- unaffected 4.19.295 – ≤ 4.19.*
- unaffected 5.4.257 – ≤ 5.4.*
- unaffected 5.10.195 – ≤ 5.10.*
- unaffected 5.15.132 – ≤ 5.15.*
- unaffected 6.1.53 – ≤ 6.1.*
- unaffected 6.4.16 – ≤ 6.4.*
- unaffected 6.5.3 – ≤ 6.5.*
- unaffected 6.6 – ≤ *
References (9)
- https://git.kernel.org/stable/c/d155c5f64cefacdc6a9a26d40be53ee2903c28ff (opens in a new tab)
- https://git.kernel.org/stable/c/139d285e7695279f030dbb172e2d0245425c86c6 (opens in a new tab)
- https://git.kernel.org/stable/c/231086e6a36316b823654f4535653f22d6344420 (opens in a new tab)
- https://git.kernel.org/stable/c/bef85d58f7709896ed8426560ad117a73a37762f (opens in a new tab)
- https://git.kernel.org/stable/c/d7fd24b8d1bb54c5bcf583139e11a5e651e0263c (opens in a new tab)
- https://git.kernel.org/stable/c/7e7197e4d6a1bc72a774590d8765909f898be1dc (opens in a new tab)
- https://git.kernel.org/stable/c/0c57f9ad2c3ed43abb764b0247d610ff7fdb7a00 (opens in a new tab)
- https://git.kernel.org/stable/c/c2509f7c37355e1f0bd5b7087815b845fd383723 (opens in a new tab)
- https://git.kernel.org/stable/c/35a7a1ce7c7d61664ee54f5239a1f120ab95a87e (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-53384)Record last updated .