CVE-2023-52593

wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()

published March 6, 2024

CVSS
—
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()

Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()'

should check the return value before examining skb data. So convert

the latter to return an appropriate error code and propagate it to

return from 'wfx_start_ap()' as well. Compile tested only.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Published
2024-03-06T06:45Z
EPSS history
Timeline
  • 06 MAR 06:45Z
    wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()
    cvelistv5