CVE-2023-54300 — Access of Uninitialized Pointer in Linux
Severity
6.6MEDIUM
No vectorEPSS
0.0%
top 84.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
For the reasons also described in commit b383e8abed41 ("wifi: ath9k: avoid
uninit memory read in ath9k_htc_rx_msg()"), ath9k_htc_rx_msg() should
validate pkt_len before accessing the SKB.
For example, the obtained SKB may have been badly constructed with
pkt_len = 8. In this case, the SKB can only contain a valid htc_frame_hdr
but after being processed in ath9k…
Affected Packages4 packages
▶CVEListV5linux/linuxfb9987d0f748c983bb795a86f47522313f701a08 — 0bc12e41af4e3ae1f0efecc377f0514459df0707+9
🔴Vulnerability Details
3GHSA▶
GHSA-2337-fj37-r35q: In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
For the reason↗2025-12-30
OSV▶
CVE-2023-54300: In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx For the reasons↗2025-12-30