CVE-2023-53153
published 2025-09-15CVE-2023-53153: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Fix use after free for wext
Key information in wext.connect is not reset on (re)connect and can hold
data from a previous connection.
Reset key data to avoid that drivers or mac80211 incorrectly detect a
WEP connection request and access the freed or already reused memory.
Additionally optimize cfg80211_sme_connect() and avoid an useless
schedule of conn_work.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 66af4a2ab1d65d556d638cb9555a3b823c2557a9 | 66af4a2ab1d65d556d638cb9555a3b823c2557a9 |
| linux | linux | >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < a2a92b3e9d8e03ee3f9ee407fc46a9b4bd02d8b6 | a2a92b3e9d8e03ee3f9ee407fc46a9b4bd02d8b6 |
| linux | linux | >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 6f1959c17d4cb5b74af6fc31dc787e1dc3e4f6e2 | 6f1959c17d4cb5b74af6fc31dc787e1dc3e4f6e2 |
| linux | linux | >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 2cfe78619b0de6d2da773978bc2d22797212eaa7 | 2cfe78619b0de6d2da773978bc2d22797212eaa7 |
| linux | linux | >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < fd081afd21eb35b968b0330700c43ec94986e1c4 | fd081afd21eb35b968b0330700c43ec94986e1c4 |
| linux | linux | >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 22dfb21bf1cd876616d45cda1bc6daa89eec6747 | 22dfb21bf1cd876616d45cda1bc6daa89eec6747 |
| linux | linux | >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < f4b6a138efb8a32507b8946104e32cb926308da7 | f4b6a138efb8a32507b8946104e32cb926308da7 |
| linux | linux | >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 015b8cc5e7c4d7bb671f1984d7b7338c310b185b | 015b8cc5e7c4d7bb671f1984d7b7338c310b185b |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 2.6.32 < 4.14.308 | 4.14.308 |
| linux | linux_kernel | >= 4.15 < 4.19.276 | 4.19.276 |
| linux | linux_kernel | >= 4.20 < 5.4.235 | 5.4.235 |
| linux | linux_kernel | >= 5.11 < 5.15.99 | 5.15.99 |
| linux | linux_kernel | >= 5.16 < 6.1.16 | 6.1.16 |
| linux | linux_kernel | >= 5.5 < 5.10.173 | 5.10.173 |
| linux | linux_kernel | >= 6.2 < 6.2.3 | 6.2.3 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: wifi: cfg80211: Fix use after free for wext
vendor_redhat·2025-09-15·CVSS 7.8
CVE-2023-53153 [HIGH] CWE-416 kernel: wifi: cfg80211: Fix use after free for wext
kernel: wifi: cfg80211: Fix use after free for wext
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Fix use after free for wext
Key information in wext.connect is not reset on (re)connect and can hold
data from a previous connection.
Reset key data to avoid that drivers or mac80211 incorrectly detect a
WEP connection request and access the freed or already reused memory.
Additionally optimize cfg80211_sme_connect() and avoid an useless
schedule of conn_work.
Statement: The issue is a local use-after-free in cfg80211’s legacy Wireless Extensions path: stale key fields in wext.connect could lead mac80211/drivers to access freed memory.
Exploitation is not remote: it requires local interface management privileges (CAP_NET_ADMIN) and the system actually us
Debian
CVE-2023-53153: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
vendor_debian·2023·CVSS 7.8
CVE-2023-53153 [HIGH] CVE-2023-53153: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on (re)connect and can hold data from a previous connection. Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP connection request and access the freed or already reused memory. Additionally optimize cfg80211_sme_connect() and avoid an useless schedule of conn_work.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
GHSA
GHSA-mmx3-2qhv-f4x6: In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Fix use after free for wext
Key information in wext
ghsa_unreviewed·2025-09-15
CVE-2023-53153 [HIGH] CWE-416 GHSA-mmx3-2qhv-f4x6: In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Fix use after free for wext
Key information in wext
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Fix use after free for wext
Key information in wext.connect is not reset on (re)connect and can hold
data from a previous connection.
Reset key data to avoid that drivers or mac80211 incorrectly detect a
WEP connection request and access the freed or already reused memory.
Additionally optimize cfg80211_sme_connect() and avoid an useless
schedule of conn_work.
OSV
CVE-2023-53153: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext
osv·2025-09-15·CVSS 7.8
CVE-2023-53153 [HIGH] CVE-2023-53153: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on (re)connect and can hold data from a previous connection. Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP connection request and access the freed or already reused memory. Additionally optimize cfg80211_sme_connect() and avoid an useless schedule of conn_work.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/015b8cc5e7c4d7bb671f1984d7b7338c310b185bhttps://git.kernel.org/stable/c/22dfb21bf1cd876616d45cda1bc6daa89eec6747https://git.kernel.org/stable/c/2cfe78619b0de6d2da773978bc2d22797212eaa7https://git.kernel.org/stable/c/66af4a2ab1d65d556d638cb9555a3b823c2557a9https://git.kernel.org/stable/c/6f1959c17d4cb5b74af6fc31dc787e1dc3e4f6e2https://git.kernel.org/stable/c/a2a92b3e9d8e03ee3f9ee407fc46a9b4bd02d8b6https://git.kernel.org/stable/c/f4b6a138efb8a32507b8946104e32cb926308da7https://git.kernel.org/stable/c/fd081afd21eb35b968b0330700c43ec94986e1c4
2025-09-15
Published