cbcvebase.
CVE-2023-52832
published 2024-05-21

CVE-2023-52832: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() We can get a UBSAN…

PriorityP342critical9.1CVSS 3.1
AVNACLPRNUINSUCHINAH
EPSS
1.26%
66.7th percentile
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() We can get a UBSAN warning if ieee80211_get_tx_power() returns the INT_MIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in net/wireless/nl80211.c:3816:5 -2147483648 * 100 cannot be represented in type 'int' CPU: 0 PID: 20433 Comm: insmod Tainted: G WC OE Call Trace: dump_stack+0x74/0x92 ubsan_epilogue+0x9/0x50 handle_overflow+0x8d/0xd0 __ubsan_handle_mul_overflow+0xe/0x10 nl80211_send_iface+0x688/0x6b0 [cfg80211] [...] cfg80211_register_wdev+0x78/0xb0 [cfg80211] cfg80211_netdev_notifier_call+0x200/0x620 [cfg80211] [...] ieee80211_if_add+0x60e/0x8f0 [mac80211] ieee80211_register_hw+0xda5/0x1170 [mac80211] In this case, simply return an error instead, to indicate that no data is available.

Affected

20 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.64-1 (bookworm)linux 6.1.64-1 (bookworm)
linuxlinux
linuxlinux>= db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde < 717de20abdcd1d4993fa450e28b8086a352620ea717de20abdcd1d4993fa450e28b8086a352620ea
linuxlinux>= db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde < 21a0f310a9f3bfd2b4cf4f382430e638607db84621a0f310a9f3bfd2b4cf4f382430e638607db846
linuxlinux>= db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde < 2be24c47ac19bf639c48c082486c08888bd603c62be24c47ac19bf639c48c082486c08888bd603c6
linuxlinux>= db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde < adc2474d823fe81d8da759207f4f1d3691aa775aadc2474d823fe81d8da759207f4f1d3691aa775a
linuxlinux>= db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde < 5a94cffe90e20e8fade0b9abd4370bd671fe87c75a94cffe90e20e8fade0b9abd4370bd671fe87c7
linuxlinux>= db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde < e160ab85166e77347d0cbe5149045cb25e83937fe160ab85166e77347d0cbe5149045cb25e83937f
linuxlinux_kernel< 4.14.3314.14.331
linuxlinux_kernel>= 0 < 5.10.205-15.10.205-1
linuxlinux_kernel>= 0 < 6.1.64-16.1.64-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 4.15 < 4.19.3004.19.300
linuxlinux_kernel>= 4.20 < 5.4.2625.4.262
linuxlinux_kernel>= 5.11 < 5.15.1405.15.140
linuxlinux_kernel>= 5.16 < 6.1.646.1.64
linuxlinux_kernel>= 5.5 < 5.10.2025.10.202
linuxlinux_kernel>= 6.2 < 6.5.136.5.13
linuxlinux_kernel>= 6.6 < 6.6.36.6.3

CVSS provenance

nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
osv9.1CRITICAL
vendor_debian9.1CRITICAL
vendor_redhat9.1CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.