In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Fix use after free for wext
Key information in wext.connect is not reset on (re)connect and can hold data from a previous connection.
Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP connection request and access the freed or already reused memory.
Additionally optimize cfg80211smeconnect() and avoid an useless schedule of conn_work.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4b6a138efb8a32507b8946104e32cb926308da7",
"id": "CVE-2023-53153-059545ee",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/wireless/sme.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"46956572784466083389060462318264932687",
"104141394616918453192767294911035419112",
"238744377966586815270507083197385591532",
"101452289615867066626116932672980212107",
"46990293481900390250048338866820515248",
"61079789226132086527658498458201225359",
"317717781438663741921537579149264920444",
"237611402856442830909322312183082737869",
"258722764042972508665451118023283423789",
"195183384908757189942970383155753488373",
"136903550477089286754886139493522226774",
"323207950363435247825994616528241580397",
"223093233989260208122904899967709451093",
"99893146094877920205354495093802973732",
"295842007976862344324118672370170222171",
"190619524483160102819180700539064175926",
"338572832675352963520937411956956739025",
"307311816762839410886481258058387279237",
"65738069646081371339669964610341670915",
"2862968485583879933958286597661151146",
"122001630601317124017099987775113239833"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22dfb21bf1cd876616d45cda1bc6daa89eec6747",
"id": "CVE-2023-53153-066283a9",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_get_conn_bss",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 683.0,
"function_hash": "197845036292646678328059559141828530252"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22dfb21bf1cd876616d45cda1bc6daa89eec6747",
"id": "CVE-2023-53153-07861014",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1921.0,
"function_hash": "33683190940930733062373037143394573500"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cfe78619b0de6d2da773978bc2d22797212eaa7",
"id": "CVE-2023-53153-0a0c4ca9",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/wireless/sme.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"107134068167609291527907139471393458730",
"269096220590436418258112886984819796924",
"238744377966586815270507083197385591532",
"101452289615867066626116932672980212107",
"46990293481900390250048338866820515248",
"61079789226132086527658498458201225359",
"317717781438663741921537579149264920444",
"237611402856442830909322312183082737869",
"258722764042972508665451118023283423789",
"195183384908757189942970383155753488373",
"131100133205485257476696959437571294971",
"201473755921593011937154448003800494494",
"267040311119760777751898358393887600430",
"99893146094877920205354495093802973732",
"295842007976862344324118672370170222171",
"190619524483160102819180700539064175926",
"338572832675352963520937411956956739025",
"307311816762839410886481258058387279237",
"65738069646081371339669964610341670915",
"2862968485583879933958286597661151146",
"61328219135001203119284316917434264782"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2a92b3e9d8e03ee3f9ee407fc46a9b4bd02d8b6",
"id": "CVE-2023-53153-0f8506dd",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_sme_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1758.0,
"function_hash": "157285793103802503441349046134705612656"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66af4a2ab1d65d556d638cb9555a3b823c2557a9",
"id": "CVE-2023-53153-10cbb12b",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1756.0,
"function_hash": "70081495773387671974209996933409452795"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2a92b3e9d8e03ee3f9ee407fc46a9b4bd02d8b6",
"id": "CVE-2023-53153-1368dafc",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/wireless/sme.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"107134068167609291527907139471393458730",
"269096220590436418258112886984819796924",
"238744377966586815270507083197385591532",
"101452289615867066626116932672980212107",
"46990293481900390250048338866820515248",
"61079789226132086527658498458201225359",
"317717781438663741921537579149264920444",
"237611402856442830909322312183082737869",
"258722764042972508665451118023283423789",
"195183384908757189942970383155753488373",
"131100133205485257476696959437571294971",
"201473755921593011937154448003800494494",
"267040311119760777751898358393887600430",
"99893146094877920205354495093802973732",
"295842007976862344324118672370170222171",
"190619524483160102819180700539064175926",
"338572832675352963520937411956956739025",
"307311816762839410886481258058387279237",
"65738069646081371339669964610341670915",
"2862968485583879933958286597661151146",
"61328219135001203119284316917434264782"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cfe78619b0de6d2da773978bc2d22797212eaa7",
"id": "CVE-2023-53153-2584ee89",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_sme_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1758.0,
"function_hash": "157285793103802503441349046134705612656"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fd081afd21eb35b968b0330700c43ec94986e1c4",
"id": "CVE-2023-53153-2f8cda87",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_sme_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1758.0,
"function_hash": "157285793103802503441349046134705612656"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4b6a138efb8a32507b8946104e32cb926308da7",
"id": "CVE-2023-53153-30d9e4a0",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_sme_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1704.0,
"function_hash": "240580668743236804169124089263441546985"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fd081afd21eb35b968b0330700c43ec94986e1c4",
"id": "CVE-2023-53153-35eeee4c",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_get_conn_bss",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 683.0,
"function_hash": "197845036292646678328059559141828530252"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fd081afd21eb35b968b0330700c43ec94986e1c4",
"id": "CVE-2023-53153-3b88327e",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/wireless/sme.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"46956572784466083389060462318264932687",
"104141394616918453192767294911035419112",
"238744377966586815270507083197385591532",
"101452289615867066626116932672980212107",
"46990293481900390250048338866820515248",
"61079789226132086527658498458201225359",
"317717781438663741921537579149264920444",
"237611402856442830909322312183082737869",
"258722764042972508665451118023283423789",
"195183384908757189942970383155753488373",
"131100133205485257476696959437571294971",
"201473755921593011937154448003800494494",
"267040311119760777751898358393887600430",
"99893146094877920205354495093802973732",
"295842007976862344324118672370170222171",
"190619524483160102819180700539064175926",
"338572832675352963520937411956956739025",
"307311816762839410886481258058387279237",
"65738069646081371339669964610341670915",
"2862968485583879933958286597661151146",
"61328219135001203119284316917434264782"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66af4a2ab1d65d556d638cb9555a3b823c2557a9",
"id": "CVE-2023-53153-4465a455",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/wireless/sme.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"107134068167609291527907139471393458730",
"269096220590436418258112886984819796924",
"238744377966586815270507083197385591532",
"101452289615867066626116932672980212107",
"46990293481900390250048338866820515248",
"61079789226132086527658498458201225359",
"317717781438663741921537579149264920444",
"237611402856442830909322312183082737869",
"258722764042972508665451118023283423789",
"195183384908757189942970383155753488373",
"131100133205485257476696959437571294971",
"201473755921593011937154448003800494494",
"267040311119760777751898358393887600430",
"99893146094877920205354495093802973732",
"295842007976862344324118672370170222171",
"190619524483160102819180700539064175926",
"338572832675352963520937411956956739025",
"307311816762839410886481258058387279237",
"65738069646081371339669964610341670915",
"2862968485583879933958286597661151146",
"61328219135001203119284316917434264782"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f1959c17d4cb5b74af6fc31dc787e1dc3e4f6e2",
"id": "CVE-2023-53153-6f1b4079",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_get_conn_bss",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 683.0,
"function_hash": "197845036292646678328059559141828530252"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f1959c17d4cb5b74af6fc31dc787e1dc3e4f6e2",
"id": "CVE-2023-53153-76c75d1f",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1833.0,
"function_hash": "210043176531616874284067359627489833313"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cfe78619b0de6d2da773978bc2d22797212eaa7",
"id": "CVE-2023-53153-7a639053",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1833.0,
"function_hash": "210043176531616874284067359627489833313"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@015b8cc5e7c4d7bb671f1984d7b7338c310b185b",
"id": "CVE-2023-53153-80d4103c",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1828.0,
"function_hash": "263093531091875758787575722684389190695"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@015b8cc5e7c4d7bb671f1984d7b7338c310b185b",
"id": "CVE-2023-53153-8868c627",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_sme_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1704.0,
"function_hash": "240580668743236804169124089263441546985"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22dfb21bf1cd876616d45cda1bc6daa89eec6747",
"id": "CVE-2023-53153-8c78bfef",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_sme_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1704.0,
"function_hash": "240580668743236804169124089263441546985"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@015b8cc5e7c4d7bb671f1984d7b7338c310b185b",
"id": "CVE-2023-53153-9427dda6",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/wireless/sme.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"46956572784466083389060462318264932687",
"104141394616918453192767294911035419112",
"238744377966586815270507083197385591532",
"101452289615867066626116932672980212107",
"46990293481900390250048338866820515248",
"61079789226132086527658498458201225359",
"317717781438663741921537579149264920444",
"237611402856442830909322312183082737869",
"258722764042972508665451118023283423789",
"195183384908757189942970383155753488373",
"136903550477089286754886139493522226774",
"323207950363435247825994616528241580397",
"223093233989260208122904899967709451093",
"99893146094877920205354495093802973732",
"295842007976862344324118672370170222171",
"190619524483160102819180700539064175926",
"338572832675352963520937411956956739025",
"124103413689812937681127853249741928633",
"65738069646081371339669964610341670915",
"2862968485583879933958286597661151146",
"122001630601317124017099987775113239833"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cfe78619b0de6d2da773978bc2d22797212eaa7",
"id": "CVE-2023-53153-b4448fa1",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_get_conn_bss",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 683.0,
"function_hash": "197845036292646678328059559141828530252"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@22dfb21bf1cd876616d45cda1bc6daa89eec6747",
"id": "CVE-2023-53153-cc37778a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/wireless/sme.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"46956572784466083389060462318264932687",
"104141394616918453192767294911035419112",
"238744377966586815270507083197385591532",
"101452289615867066626116932672980212107",
"46990293481900390250048338866820515248",
"61079789226132086527658498458201225359",
"317717781438663741921537579149264920444",
"237611402856442830909322312183082737869",
"258722764042972508665451118023283423789",
"195183384908757189942970383155753488373",
"136903550477089286754886139493522226774",
"323207950363435247825994616528241580397",
"223093233989260208122904899967709451093",
"99893146094877920205354495093802973732",
"295842007976862344324118672370170222171",
"190619524483160102819180700539064175926",
"338572832675352963520937411956956739025",
"307311816762839410886481258058387279237",
"65738069646081371339669964610341670915",
"2862968485583879933958286597661151146",
"122001630601317124017099987775113239833"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4b6a138efb8a32507b8946104e32cb926308da7",
"id": "CVE-2023-53153-cfaa6a9f",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_get_conn_bss",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 683.0,
"function_hash": "197845036292646678328059559141828530252"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2a92b3e9d8e03ee3f9ee407fc46a9b4bd02d8b6",
"id": "CVE-2023-53153-d2aaf724",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1756.0,
"function_hash": "70081495773387671974209996933409452795"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@015b8cc5e7c4d7bb671f1984d7b7338c310b185b",
"id": "CVE-2023-53153-db6aecbf",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_get_conn_bss",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 683.0,
"function_hash": "197845036292646678328059559141828530252"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f1959c17d4cb5b74af6fc31dc787e1dc3e4f6e2",
"id": "CVE-2023-53153-dd531e67",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "net/wireless/sme.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"107134068167609291527907139471393458730",
"269096220590436418258112886984819796924",
"238744377966586815270507083197385591532",
"101452289615867066626116932672980212107",
"46990293481900390250048338866820515248",
"61079789226132086527658498458201225359",
"317717781438663741921537579149264920444",
"237611402856442830909322312183082737869",
"258722764042972508665451118023283423789",
"195183384908757189942970383155753488373",
"131100133205485257476696959437571294971",
"201473755921593011937154448003800494494",
"267040311119760777751898358393887600430",
"99893146094877920205354495093802973732",
"295842007976862344324118672370170222171",
"190619524483160102819180700539064175926",
"338572832675352963520937411956956739025",
"307311816762839410886481258058387279237",
"65738069646081371339669964610341670915",
"2862968485583879933958286597661151146",
"61328219135001203119284316917434264782"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66af4a2ab1d65d556d638cb9555a3b823c2557a9",
"id": "CVE-2023-53153-e693f637",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_sme_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1758.0,
"function_hash": "157285793103802503441349046134705612656"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fd081afd21eb35b968b0330700c43ec94986e1c4",
"id": "CVE-2023-53153-e9116ec9",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1833.0,
"function_hash": "210043176531616874284067359627489833313"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2a92b3e9d8e03ee3f9ee407fc46a9b4bd02d8b6",
"id": "CVE-2023-53153-ea8b9eff",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_get_conn_bss",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 683.0,
"function_hash": "197845036292646678328059559141828530252"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66af4a2ab1d65d556d638cb9555a3b823c2557a9",
"id": "CVE-2023-53153-ef4ede88",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_get_conn_bss",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 683.0,
"function_hash": "197845036292646678328059559141828530252"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4b6a138efb8a32507b8946104e32cb926308da7",
"id": "CVE-2023-53153-fdeb31ea",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1921.0,
"function_hash": "33683190940930733062373037143394573500"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f1959c17d4cb5b74af6fc31dc787e1dc3e4f6e2",
"id": "CVE-2023-53153-ff36ea1c",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "cfg80211_sme_connect",
"file": "net/wireless/sme.c"
},
"digest": {
"length": 1758.0,
"function_hash": "157285793103802503441349046134705612656"
},
"signature_type": "Function"
}
]