CVE-2023-52593: linux-libc-dev - Possible NULL pointer dereference in wfx_set_mfp_ap()
Summary
CVE-2023-52593: In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the kernel. These headers are necessary for compiling programs that interface with the kernel. The linux-libc-dev package is commonly used in Debian-based distributions. This vulnerability affects version 6.1.90-1 of the linux-libc-dev package.
Vulnerability Detail
The vulnerability identified as CVE-2023-52593 is related to the wifi subsystem in the Linux kernel. Specifically, the vulnerability exists in the wfx_set_mfp_ap() function. The function fails to check the return value of ieee80211_beacon_get(), which can lead to a NULL pointer dereference. An attacker could exploit this vulnerability to cause a denial of service (NULL pointer dereference) or potentially execute arbitrary code. The vulnerability has been fixed in the Linux kernel.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The linux-libc-dev package is vulnerable to a NULL pointer dereference vulnerability in the wfx_set_mfp_ap() function of the wifi subsystem. Users are advised to update their linux-libc-dev package to a fixed version provided by the package maintainer or distribution. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the kernel. These headers are necessary for compiling programs that interface with the kernel.
The vulnerability could allow an attacker to cause a denial of service (NULL pointer dereference) or potentially execute arbitrary code.
To fix this vulnerability, users should update their linux-libc-dev package to a version that includes the fix. It is recommended to upgrade to the latest available version provided by the package maintainer or distribution.
No specific workaround has been provided for this vulnerability.
More information about this vulnerability can be found in the CVE-2023-52593 entry on the National Vulnerability Database (NVD) and the Debian Security Tracker.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
