CVE-2023-54141
published 2025-12-24CVE-2023-54141: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018 During sending data after…
PriorityP420medium5.8
EPSS
0.18%
7.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
During sending data after clients connected, hw_ops->get_ring_selector()
will be called. But for IPQ5018, this member isn't set, and the
following NULL pointer exception will be occurred:
[ 38.840478] 8] (ath11k_dp_tx [ath11k]) from [] (ath11k_mac_op_tx+0x80/0x190 [ath11k])
[ 39.446607] [] (ath11k_mac_op_tx [ath11k]) from [] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211])
[ 39.456162] [] (ieee80211_handle_wake_tx_queue [mac80211]) from [] (ieee80211_probereq_get+0x584/0x704 [mac80211])
[ 39.467443] [] (ieee80211_probereq_get [mac80211]) from [] (ieee80211_tx_prepare_skb+0x1f8/0x248 [mac80211])
[ 39.479334] [] (ieee80211_tx_prepare_skb [mac80211]) from [] (__ieee80211_subif_start_xmit+0x32c/0x3d4 [mac80211])
[ 39.491053] [] (__ieee80211_subif_start_xmit [mac80211]) from [] (ieee80211_tx_control_port+0x19c/0x288 [mac80211])
[ 39.502946] [] (ieee80211_tx_control_port [mac80211]) from [] (nl80211_tx_control_port+0x174/0x1d4 [cfg80211])
[ 39.515017] [] (nl80211_tx_control_port [cfg80211]) from [] (genl_rcv_msg+0x154/0x340)
[ 39.526814] [] (genl_rcv_msg) from [] (netlink_rcv_skb+0xb8/0x11c)
[ 39.536446] [] (netlink_rcv_skb) from [] (genl_rcv+0x28/0x34)
[ 39.544344] [] (genl_rcv) from [] (netlink_unicast+0x174/0x274)
[ 39.551895] [] (netlink_unicast) from [] (netlink_sendmsg+0x1dc/0x440)
[ 39.559362] [] (netlink_sendmsg) from [] (____sys_sendmsg+0x1a8/0x1fc)
[ 39.567697] [] (____sys_sendmsg) from [] (___sys_sendmsg+0xa4/0xdc)
[ 39.575941] [] (___sys_sendmsg) from [] (sys_sendmsg+0x44/0x74)
[ 39.583841] [] (sys_sendmsg) from [] (ret_fast_syscall+0x0/0x40)
...
[ 39.620734] Code: bad PC value
[ 39.625869] ---[ end trace 8aef983ad3cbc032 ]---
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.4.4-1 (forky) | linux 6.4.4-1 (forky) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 6.1.175 < 6.2 | 6.2 |
| linux | linux | >= ba60f2793d3a37a00da14bb56a26558a902d2831 < d1992d72a359732f143cc962917104d193705da7 | d1992d72a359732f143cc962917104d193705da7 |
| linux | linux | >= ba60f2793d3a37a00da14bb56a26558a902d2831 < c36289e3c5e83286974ef68c20c821fd5b63801c | c36289e3c5e83286974ef68c20c821fd5b63801c |
| linux | linux | >= ba60f2793d3a37a00da14bb56a26558a902d2831 < ce282d8de71f07f0056ea319541141152c65f552 | ce282d8de71f07f0056ea319541141152c65f552 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 6.3.0 < 6.3.13 | 6.3.13 |
| linux | linux_kernel | >= 6.4.0 < 6.4.4 | 6.4.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
vendor_redhat·2025-12-24·CVSS 5.8
CVE-2023-54141 [MEDIUM] CWE-476 kernel: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
kernel: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
During sending data after clients connected, hw_ops->get_ring_selector()
will be called. But for IPQ5018, this member isn't set, and the
following NULL pointer exception will be occurred:
[ 38.840478] 8] (ath11k_dp_tx [ath11k]) from [] (ath11k_mac_op_tx+0x80/0x190 [ath11k])
[ 39.446607] [] (ath11k_mac_op_tx [ath11k]) from [] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211])
[ 39.456162] [] (ieee80211_handle_wake_tx_queue [mac80211]) from [] (ieee80211_probereq_get+0x584/0x704 [mac80211])
[ 39.467443] [] (ieee80211_probereq_get [mac80211]) from [] (ieee80211_tx_prepare_skb+0x1f8/0x
Debian
CVE-2023-54141: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11...
vendor_debian·2023
CVE-2023-54141 [LOW] CVE-2023-54141: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11...
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018 During sending data after clients connected, hw_ops->get_ring_selector() will be called. But for IPQ5018, this member isn't set, and the following NULL pointer exception will be occurred: [ 38.840478] 8] (ath11k_dp_tx [ath11k]) from [] (ath11k_mac_op_tx+0x80/0x190 [ath11k]) [ 39.446607] [] (ath11k_mac_op_tx [ath11k]) from [] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211]) [ 39.456162] [] (ieee80211_handle_wake_tx_queue [mac80211]) from [] (ieee80211_probereq_get+0x584/0x704 [mac80211]) [ 39.467443] [] (ieee80211_probereq_get [mac80211]) from [] (ieee80211_tx_prepare_skb+0x1f8/0x248 [mac80211]) [ 39.479334] [] (ieee80211_tx_prepare_skb [mac80211]) from
OSV
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
osv·2025-12-24
CVE-2023-54141 wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
During sending data after clients connected, hw_ops->get_ring_selector()
will be called. But for IPQ5018, this member isn't set, and the
following NULL pointer exception will be occurred:
[ 38.840478] 8] (ath11k_dp_tx [ath11k]) from [] (ath11k_mac_op_tx+0x80/0x190 [ath11k])
[ 39.446607] [] (ath11k_mac_op_tx [ath11k]) from [] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211])
[ 39.456162] [] (ieee80211_handle_wake_tx_queue [mac80211]) from [] (ieee80211_probereq_get+0x584/0x704 [mac80211])
[ 39.467443] [] (ieee80211_probereq_get [mac80211]) from [] (ieee80211_tx_prepare_skb+0x1f8/0x248 [
OSV
CVE-2023-54141: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018 During sending d
osv·2025-12-24
CVE-2023-54141 CVE-2023-54141: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018 During sending d
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018 During sending data after clients connected, hw_ops->get_ring_selector() will be called. But for IPQ5018, this member isn't set, and the following NULL pointer exception will be occurred: [ 38.840478] 8] (ath11k_dp_tx [ath11k]) from [] (ath11k_mac_op_tx+0x80/0x190 [ath11k]) [ 39.446607] [] (ath11k_mac_op_tx [ath11k]) from [] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211]) [ 39.456162] [] (ieee80211_handle_wake_tx_queue [mac80211]) from [] (ieee80211_probereq_get+0x584/0x704 [mac80211]) [ 39.467443] [] (ieee80211_probereq_get [mac80211]) from [] (ieee80211_tx_prepare_skb+0x1f8/0x248 [mac80211]) [ 39.479334] [] (ieee80211_tx_prepare_skb [mac80211]) from
GHSA
GHSA-mj5f-xm29-rm3f: In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
During sending
ghsa_unreviewed·2025-12-24
CVE-2023-54141 GHSA-mj5f-xm29-rm3f: In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
During sending
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
During sending data after clients connected, hw_ops->get_ring_selector()
will be called. But for IPQ5018, this member isn't set, and the
following NULL pointer exception will be occurred:
[ 38.840478] 8] (ath11k_dp_tx [ath11k]) from [] (ath11k_mac_op_tx+0x80/0x190 [ath11k])
[ 39.446607] [] (ath11k_mac_op_tx [ath11k]) from [] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211])
[ 39.456162] [] (ieee80211_handle_wake_tx_queue [mac80211]) from [] (ieee80211_probereq_get+0x584/0x704 [mac80211])
[ 39.467443] [] (ieee80211_probereq_get [mac80211]) from [] (ieee80211_tx_prepare_skb+0x1f8/0x248 [mac80211])
[ 39.479334] [] (ieee80211_tx_prepare_skb [mac80211]) fr
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54141 kernel: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
bugzilla·2025-12-24
CVE-2023-54141 [MEDIUM] CVE-2023-54141 kernel: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
CVE-2023-54141 kernel: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
During sending data after clients connected, hw_ops->get_ring_selector()
will be called. But for IPQ5018, this member isn't set, and the
following NULL pointer exception will be occurred:
[ 38.840478] 8] (ath11k_dp_tx [ath11k]) from [] (ath11k_mac_op_tx+0x80/0x190 [ath11k])
[ 39.446607] [] (ath11k_mac_op_tx [ath11k]) from [] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211])
[ 39.456162] [] (ieee80211_handle_wake_tx_queue [mac80211]) from [] (ieee80211_probereq_get+0x584/0x704 [mac80211])
[ 39.467443] [] (ieee80211_probereq_get [mac80211]) from [] (ieee80211_tx_pr
Wiz
CVE-2023-54141 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54141 CVE-2023-54141 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54141 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018
During sending data after clients connected, hw_ops->get_ring_selector()
will be called. But for IPQ5018, this member isn't set, and the
following NULL pointer exception will be occurred:
[ 38.840478] 8] (ath11k_dp_tx [ath11k]) from [] (ath11k_mac_op_tx+0x80/0x190 [ath11k])
[ 39.446607] [] (ath11k_mac_op_tx [ath11k]) from [] (ieee80211_handle_wake_tx_queue+0x7c/0xc0 [mac80211])
[ 39.456162] [] (ieee80211_handle_wake_tx_queue [mac80211]) from [] (ieee80211_probereq_get+0x584/0x704 [mac80211])
[ 39.467443] [] (ieee80211_probereq_get [mac80211]) from [] (ieee80211_tx_prepare_skb+0x1f8/0
2025-12-24
Published