Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-53554

staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() The "exc->key_len" is a u16 that comes from the user. If it's over IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to < 9496fb96ddeb740dc6b966f4a7d8dfb8b93921c6affected
  • b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to < 663fff29fd613e2b0d30c4138157312ba93c4939affected
  • b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to < 5373a1aa91b2298f9305794b8270cf9896be96b6affected
  • b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to < caac4b6c15b66feae4d83f602e1e46f124540202affected
  • b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to < baf420e30364ef9efe3e29a5c0e01e612aebf3feaffected
  • b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to < 7ae9f55a495077f838bab466411ee6f38574df9baffected
  • b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to < b1b04b56745bc79286c80aa876fabfab1e08ebf1affected
  • b121d84882b97b8668be0b95e9ba50cfd01aa0f1 to < 5f1c7031e044cb2fba82836d55cc235e2ad619dcaffected

Linux Linux

Default version status: affected

  • 4.12affected
  • 0 to < 4.12unaffected
  • 4.14.322 to ≤ 4.14.*unaffected
  • 4.19.291 to ≤ 4.19.*unaffected
  • 5.4.253 to ≤ 5.4.*unaffected
  • 5.10.190 to ≤ 5.10.*unaffected
  • 5.15.124 to ≤ 5.15.*unaffected
  • 6.1.43 to ≤ 6.1.*unaffected
  • 6.4.8 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References