In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: avoid possible NULL skb pointer dereference
In 'mwifiexhandleuaprxforward()', always check the value returned by 'skbcopy()' to avoid potential NULL pointer dereference in 'mwifiexuapqueuebridged_pkt()', and drop original skb in case of copying failure.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@139d285e7695279f030dbb172e2d0245425c86c6",
"id": "CVE-2023-53384-060a5bcd",
"deprecated": false,
"target": {
"function": "mwifiex_handle_uap_rx_forward",
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"length": 659.0,
"function_hash": "68791951022545219920836635727173141566"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@231086e6a36316b823654f4535653f22d6344420",
"id": "CVE-2023-53384-08401aca",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"324715007205040098577886848175363595829",
"25113956050847754397583491033427073524",
"122031886411519932050467106884161725823",
"11309321854690443758943631404485347849"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7fd24b8d1bb54c5bcf583139e11a5e651e0263c",
"id": "CVE-2023-53384-39184044",
"deprecated": false,
"target": {
"function": "mwifiex_handle_uap_rx_forward",
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"length": 659.0,
"function_hash": "68791951022545219920836635727173141566"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d155c5f64cefacdc6a9a26d40be53ee2903c28ff",
"id": "CVE-2023-53384-3fbb2987",
"deprecated": false,
"target": {
"function": "mwifiex_handle_uap_rx_forward",
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"length": 659.0,
"function_hash": "68791951022545219920836635727173141566"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@139d285e7695279f030dbb172e2d0245425c86c6",
"id": "CVE-2023-53384-4a443928",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"324715007205040098577886848175363595829",
"25113956050847754397583491033427073524",
"122031886411519932050467106884161725823",
"11309321854690443758943631404485347849"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bef85d58f7709896ed8426560ad117a73a37762f",
"id": "CVE-2023-53384-4ae3803e",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"324715007205040098577886848175363595829",
"25113956050847754397583491033427073524",
"122031886411519932050467106884161725823",
"11309321854690443758943631404485347849"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d155c5f64cefacdc6a9a26d40be53ee2903c28ff",
"id": "CVE-2023-53384-80acaf91",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"324715007205040098577886848175363595829",
"25113956050847754397583491033427073524",
"122031886411519932050467106884161725823",
"11309321854690443758943631404485347849"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0c57f9ad2c3ed43abb764b0247d610ff7fdb7a00",
"id": "CVE-2023-53384-86b1e5d4",
"deprecated": false,
"target": {
"function": "mwifiex_handle_uap_rx_forward",
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"length": 659.0,
"function_hash": "68791951022545219920836635727173141566"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0c57f9ad2c3ed43abb764b0247d610ff7fdb7a00",
"id": "CVE-2023-53384-881b542e",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"324715007205040098577886848175363595829",
"25113956050847754397583491033427073524",
"122031886411519932050467106884161725823",
"11309321854690443758943631404485347849"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bef85d58f7709896ed8426560ad117a73a37762f",
"id": "CVE-2023-53384-a723cc00",
"deprecated": false,
"target": {
"function": "mwifiex_handle_uap_rx_forward",
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"length": 659.0,
"function_hash": "68791951022545219920836635727173141566"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7fd24b8d1bb54c5bcf583139e11a5e651e0263c",
"id": "CVE-2023-53384-d5025b16",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"324715007205040098577886848175363595829",
"25113956050847754397583491033427073524",
"122031886411519932050467106884161725823",
"11309321854690443758943631404485347849"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@231086e6a36316b823654f4535653f22d6344420",
"id": "CVE-2023-53384-f3bf6b55",
"deprecated": false,
"target": {
"function": "mwifiex_handle_uap_rx_forward",
"file": "drivers/net/wireless/marvell/mwifiex/uap_txrx.c"
},
"signature_version": "v1",
"digest": {
"length": 659.0,
"function_hash": "68791951022545219920836635727173141566"
},
"signature_type": "Function"
}
]