CVE-2023-53717 — Out-of-bounds Write in Linux
Severity
5.8MEDIUM
No vectorEPSS
0.0%
top 88.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 22
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()
Fix a stack-out-of-bounds write that occurs in a WMI response callback
function that is called after a timeout occurs in ath9k_wmi_cmd().
The callback writes to wmi->cmd_rsp_buf, a stack-allocated buffer that
could no longer be valid when a timeout occurs. Set wmi->last_seq_id to
0 when a timeout occurred.
Found by a modified version of syzkaller…
Affected Packages4 packages
▶CVEListV5linux/linuxfb9987d0f748c983bb795a86f47522313f701a08 — 89a33c3c847b19b19205cde1d924df2a6c70d8eb+8
🔴Vulnerability Details
3GHSA▶
GHSA-qfvg-x2cj-cf5g: In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()↗2025-10-22
OSV▶
CVE-2023-53717: In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() F↗2025-10-22