CVE-2023-53582NULL Pointer Dereference in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strreplace() in brcmf_c_preinit_dcmds(). This buffer is filled with a CLM version string by memcpy() in brcmf_fil_iovar_data_get(). Ensure buf is null-terminated. Found by a modified version of syzkaller. [ 33.004414][ T1

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel4.154.19.276+5
Debianlinux/linux_kernel< 5.10.178-1+3
CVEListV5linux/linuxfdd0bd88ceaecf729db103ac8836af5805dd2dc13b173b4ad9c001a555f44adc7836d6fe3afbe9ec+7
debiandebian/linux< linux 6.1.20-1 (bookworm)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-958g-2hvc-2pgw: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bou2025-10-04
OSV
CVE-2023-53582: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-boun2025-10-04

📋Vendor Advisories

2
Red Hat
kernel: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds2025-10-04
Debian
CVE-2023-53582: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmf...2023