CVE-2023-53588
published 2025-10-04CVE-2023-53588: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check for station first in client probe When probing a client, first check…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
4.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: check for station first in client probe
When probing a client, first check if we have it, and then
check for the channel context, otherwise you can trigger
the warning there easily by probing when the AP isn't even
started yet. Since a client existing means the AP is also
operating, we can then keep the warning.
Also simplify the moved code a bit.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.55-1 (bookworm) | linux 6.1.55-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 55de908ab292c03f1eb280f51170ddb9c6b57e31 < 7e1cda5cf07f848e6b50b4e5e7761ffbce905a3d | 7e1cda5cf07f848e6b50b4e5e7761ffbce905a3d |
| linux | linux | >= 55de908ab292c03f1eb280f51170ddb9c6b57e31 < 7dce2deb0b03aaf46c87ceedea81ef4153e26c40 | 7dce2deb0b03aaf46c87ceedea81ef4153e26c40 |
| linux | linux | >= 55de908ab292c03f1eb280f51170ddb9c6b57e31 < 67dfa589aa8806c7959cbca2f4613b8d41c75a06 | 67dfa589aa8806c7959cbca2f4613b8d41c75a06 |
| linux | linux_kernel | >= 0 < 6.1.55-1 | 6.1.55-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 3.8 < 6.1.55 | 6.1.55 |
| linux | linux_kernel | >= 6.2 < 6.5.5 | 6.5.5 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qq6w-hrfm-74vg: In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: check for station first in client probe
When probing a client, f
ghsa_unreviewed·2025-10-04
CVE-2023-53588 [MEDIUM] GHSA-qq6w-hrfm-74vg: In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: check for station first in client probe
When probing a client, f
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: check for station first in client probe
When probing a client, first check if we have it, and then
check for the channel context, otherwise you can trigger
the warning there easily by probing when the AP isn't even
started yet. Since a client existing means the AP is also
operating, we can then keep the warning.
Also simplify the moved code a bit.
OSV
CVE-2023-53588: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check for station first in client probe When probing a client, fir
osv·2025-10-04·CVSS 5.5
CVE-2023-53588 [MEDIUM] CVE-2023-53588: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check for station first in client probe When probing a client, fir
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check for station first in client probe When probing a client, first check if we have it, and then check for the channel context, otherwise you can trigger the warning there easily by probing when the AP isn't even started yet. Since a client existing means the AP is also operating, we can then keep the warning. Also simplify the moved code a bit.
Red Hat
kernel: wifi: mac80211: check for station first in client probe
vendor_redhat·2025-10-04·CVSS 5.5
CVE-2023-53588 [MEDIUM] CWE-754 kernel: wifi: mac80211: check for station first in client probe
kernel: wifi: mac80211: check for station first in client probe
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: check for station first in client probe
When probing a client, first check if we have it, and then
check for the channel context, otherwise you can trigger
the warning there easily by probing when the AP isn't even
started yet. Since a client existing means the AP is also
operating, we can then keep the warning.
Also simplify the moved code a bit.
Statement: The bug was a logical issue in ieee80211_probe_client() where the channel context was checked before confirming the station's existence.
This could trigger kernel warnings (WARN_ON) or minor instability when probing clients before the AP is started.
Package: kernel (Red Hat Enterprise Li
Debian
CVE-2023-53588: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80...
vendor_debian·2023·CVSS 5.5
CVE-2023-53588 [MEDIUM] CVE-2023-53588: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80...
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check for station first in client probe When probing a client, first check if we have it, and then check for the channel context, otherwise you can trigger the warning there easily by probing when the AP isn't even started yet. Since a client existing means the AP is also operating, we can then keep the warning. Also simplify the moved code a bit.
Scope: local
bookworm: resolved (fixed in 6.1.55-1)
bullseye: open
forky: resolved (fixed in 6.5.6-1)
sid: resolved (fixed in 6.5.6-1)
trixie: resolved (fixed in 6.5.6-1)
No detection rules found.
No public exploits indexed.
2025-10-04
Published