{"id":"CVE-2023-52525","state":"PUBLISHED","title":"wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet\n\nOnly skip the code path trying to access the rfc1042 headers when the\nbuffer is too small, so the driver can still process packets without\nrfc1042 headers.","publishedAt":"2024-03-02T21:52:31.638Z","updatedAt":"2026-05-23T15:25:53.850Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f517c97fc129995de77dd06aa5a74f909ebf568f","status":"affected","lessThan":"71b1d2b57f145c8469aa9346f0fd57bf59b2b89c","versionType":"git"},{"version":"8824aa4ab62c800f75d96f48e1883a5f56ec5869","status":"affected","lessThan":"16cc18b9080892d1a0200a38e36ae52e464bc555","versionType":"git"},{"version":"29eca8b7863d1d7de6c5b746b374e3487d14f154","status":"affected","lessThan":"b8e260654a29de872e7cb85387d8ab8974694e8e","versionType":"git"},{"version":"3fe3923d092e22d87d1ed03e2729db444b8c1331","status":"affected","lessThan":"10a18c8bac7f60d32b7af22da03b66f350beee38","versionType":"git"},{"version":"7c54b6fc39eb1aac51cf2945f8a25e2a47fdca02","status":"affected","lessThan":"5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6","versionType":"git"},{"version":"3975e21d4d01efaf0296ded40d11c06589c49245","status":"affected","lessThan":"6b706286473db4fd54b5f869faa67f4a8cb18e99","versionType":"git"},{"version":"650d1bc02fba7b42f476d8b6643324abac5921ed","status":"affected","lessThan":"be2ff39b1504c5359f4a083c1cfcad21d666e216","versionType":"git"},{"version":"11958528161731c58e105b501ed60b83a91ea941","status":"affected","lessThan":"aef7a0300047e7b4707ea0411dc9597cba108fc8","versionType":"git"},{"version":"a7300e3800e9fd5405e88ce67709c1a97783b9c8","status":"affected","versionType":"git"},{"version":"6.4.16","status":"affected","lessThan":"6.5","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/marvell/mwifiex/sta_rx.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"4.14.326","status":"affected","lessThan":"4.14.327","versionType":"semver"},{"version":"4.19.295","status":"affected","lessThan":"4.19.296","versionType":"semver"},{"version":"5.4.257","status":"affected","lessThan":"5.4.258","versionType":"semver"},{"version":"5.10.195","status":"affected","lessThan":"5.10.198","versionType":"semver"},{"version":"5.15.132","status":"affected","lessThan":"5.15.135","versionType":"semver"},{"version":"6.1.53","status":"affected","lessThan":"6.1.57","versionType":"semver"},{"version":"6.5.3","status":"affected","lessThan":"6.5.7","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/marvell/mwifiex/sta_rx.c"]}],"references":["https://git.kernel.org/stable/c/71b1d2b57f145c8469aa9346f0fd57bf59b2b89c","https://git.kernel.org/stable/c/16cc18b9080892d1a0200a38e36ae52e464bc555","https://git.kernel.org/stable/c/b8e260654a29de872e7cb85387d8ab8974694e8e","https://git.kernel.org/stable/c/10a18c8bac7f60d32b7af22da03b66f350beee38","https://git.kernel.org/stable/c/5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6","https://git.kernel.org/stable/c/6b706286473db4fd54b5f869faa67f4a8cb18e99","https://git.kernel.org/stable/c/be2ff39b1504c5359f4a083c1cfcad21d666e216","https://git.kernel.org/stable/c/aef7a0300047e7b4707ea0411dc9597cba108fc8"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/52xxx/CVE-2023-52525.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-52525","state":"PUBLISHED","datePublished":"2024-03-02T21:52:31.638Z","dateUpdated":"2026-05-23T15:25:53.850Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-02-20T12:30:33.317Z"},"containers":{"cna":{"title":"wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet\n\nOnly skip the code path trying to access the rfc1042 headers when the\nbuffer is too small, so the driver can still process packets without\nrfc1042 headers."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"f517c97fc129995de77dd06aa5a74f909ebf568f","status":"affected","lessThan":"71b1d2b57f145c8469aa9346f0fd57bf59b2b89c","versionType":"git"},{"version":"8824aa4ab62c800f75d96f48e1883a5f56ec5869","status":"affected","lessThan":"16cc18b9080892d1a0200a38e36ae52e464bc555","versionType":"git"},{"version":"29eca8b7863d1d7de6c5b746b374e3487d14f154","status":"affected","lessThan":"b8e260654a29de872e7cb85387d8ab8974694e8e","versionType":"git"},{"version":"3fe3923d092e22d87d1ed03e2729db444b8c1331","status":"affected","lessThan":"10a18c8bac7f60d32b7af22da03b66f350beee38","versionType":"git"},{"version":"7c54b6fc39eb1aac51cf2945f8a25e2a47fdca02","status":"affected","lessThan":"5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6","versionType":"git"},{"version":"3975e21d4d01efaf0296ded40d11c06589c49245","status":"affected","lessThan":"6b706286473db4fd54b5f869faa67f4a8cb18e99","versionType":"git"},{"version":"650d1bc02fba7b42f476d8b6643324abac5921ed","status":"affected","lessThan":"be2ff39b1504c5359f4a083c1cfcad21d666e216","versionType":"git"},{"version":"11958528161731c58e105b501ed60b83a91ea941","status":"affected","lessThan":"aef7a0300047e7b4707ea0411dc9597cba108fc8","versionType":"git"},{"version":"a7300e3800e9fd5405e88ce67709c1a97783b9c8","status":"affected","versionType":"git"},{"version":"6.4.16","status":"affected","lessThan":"6.5","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/marvell/mwifiex/sta_rx.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"4.14.326","status":"affected","lessThan":"4.14.327","versionType":"semver"},{"version":"4.19.295","status":"affected","lessThan":"4.19.296","versionType":"semver"},{"version":"5.4.257","status":"affected","lessThan":"5.4.258","versionType":"semver"},{"version":"5.10.195","status":"affected","lessThan":"5.10.198","versionType":"semver"},{"version":"5.15.132","status":"affected","lessThan":"5.15.135","versionType":"semver"},{"version":"6.1.53","status":"affected","lessThan":"6.1.57","versionType":"semver"},{"version":"6.5.3","status":"affected","lessThan":"6.5.7","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/wireless/marvell/mwifiex/sta_rx.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/71b1d2b57f145c8469aa9346f0fd57bf59b2b89c"},{"url":"https://git.kernel.org/stable/c/16cc18b9080892d1a0200a38e36ae52e464bc555"},{"url":"https://git.kernel.org/stable/c/b8e260654a29de872e7cb85387d8ab8974694e8e"},{"url":"https://git.kernel.org/stable/c/10a18c8bac7f60d32b7af22da03b66f350beee38"},{"url":"https://git.kernel.org/stable/c/5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6"},{"url":"https://git.kernel.org/stable/c/6b706286473db4fd54b5f869faa67f4a8cb18e99"},{"url":"https://git.kernel.org/stable/c/be2ff39b1504c5359f4a083c1cfcad21d666e216"},{"url":"https://git.kernel.org/stable/c/aef7a0300047e7b4707ea0411dc9597cba108fc8"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-23T15:25:53.850Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.14.326","versionEndExcluding":"4.14.327"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19.295","versionEndExcluding":"4.19.296"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.257","versionEndExcluding":"5.4.258"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.195","versionEndExcluding":"5.10.198"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.132","versionEndExcluding":"5.15.135"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.53","versionEndExcluding":"6.1.57"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.3","versionEndExcluding":"6.5.7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.16"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-52525","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-03-05T22:09:59.772787Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-05T17:22:08.743Z"}},{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/stable/c/71b1d2b57f145c8469aa9346f0fd57bf59b2b89c","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/16cc18b9080892d1a0200a38e36ae52e464bc555","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/b8e260654a29de872e7cb85387d8ab8974694e8e","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/10a18c8bac7f60d32b7af22da03b66f350beee38","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/6b706286473db4fd54b5f869faa67f4a8cb18e99","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/be2ff39b1504c5359f4a083c1cfcad21d666e216","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/aef7a0300047e7b4707ea0411dc9597cba108fc8","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T23:03:20.670Z"}}]}}}