CVE-2023-53589

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: don't trust firmware n_channels

If the firmware sends us a corrupted MCC response with n_channels much larger than the command response can be, we might copy far too much (uninitialized) memory and even crash if the n_channels is large enough to make it run out of the one page allocated for the FW response.

Fix that by checking the lengths. Doing a < comparison would be sufficient, but the firmware should be doing it correctly, so check more strictly.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= dcaf9f5ecb6f395152609bdc40660d9b593dca63, < e519a404a5bbba37693cb10fa61794a5fce4fd9b; >= dcaf9f5ecb6f395152609bdc40660d9b593dca63, < d0d39bed9e95f27a246be91c5929254ac043ed30; >= dcaf9f5ecb6f395152609bdc40660d9b593dca63, < 05ad5a4d421ce65652fcb24d46b7e273130240d6; >= dcaf9f5ecb6f395152609bdc40660d9b593dca63, < 557ba100d8cf3661ff8d71c0b4a2cba8db555ec2; >= dcaf9f5ecb6f395152609bdc40660d9b593dca63, < c176f03350954b795322de0bfe1d7b514db41f45; >= dcaf9f5ecb6f395152609bdc40660d9b593dca63, < 682b6dc29d98e857e6ca4bbc077c7dc2899b7473
LinuxLinux4.1

References

Timeline

Published
Oct 4, 2025
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-53597.5The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OCVE-2023-535905.5In the Linux kernel, the following vulnerability has been resolved: sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop WiCVE-2023-535915.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix deadlock in tc route query code Cited commit causes ABBCVE-2023-535925.5In the Linux kernel, the following vulnerability has been resolved: gpio: sifive: Fix refcount leak in sifive_gpio_probe of_irq_find_parenCVE-2023-535935.5In the Linux kernel, the following vulnerability has been resolved: cifs: Release folio lock on fscache read hit. Under the current code, CVE-2023-535945.5In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in device_add() When calling kobject_adCVE-2023-535955.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: mcs: Fix NULL pointer dereferences When system is rebootCVE-2023-535967.8In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the CVE-2023-535975.5In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When thCVE-2023-535985.5In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Range check CHDBOFF and ERDBOFF If the value read fromCVE-2023-535995.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix missing initialisation affecting gcm-aes-s390 FixCVE-2023-53609.8The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthe
CVE-2023-53589: Medium severity, CVSS 5.5 | Vulnix