CVE-2023-53822
- Source
- https://cve.org/CVERecord?id=CVE-2023-53822
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53822.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-53822
- Downstream
- Published
- 2025-12-09T01:29:35.206Z
- Modified
- 2025-12-20T20:38:12.243812Z
- Summary
- wifi: ath11k: Ignore frags from uninitialized peer in dp.
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Ignore frags from uninitialized peer in dp.
When max virtual ap interfaces are configured in all the bands with ACS and hostapd restart is done every 60s, a crash is observed at random times. In this certain scenario, a fragmented packet is received for self peer, for which rxtid and rxfrags are not initialized in datapath. While handling this fragment, crash is observed as the rxfrag list is uninitialised and when we walk in ath11kdprxhsortfrags, skb null leads to exception.
To address this, before processing received fragments we check dpsetupdone flag is set to ensure that peer has completed its dp peer setup for fragment queue, else ignore processing the fragments.
Call trace: ath11kdpprocessrxerr+0x550/0x1084 [ath11k] ath11kdpservicesrng+0x70/0x370 [ath11k] 0xffffffc009693a04 _napipoll+0x30/0xa4 netrxaction+0x118/0x270 _dosoftirq+0x10c/0x244 irqexit+0x64/0xb4 _handledomainirq+0x88/0xac gichandleirq+0x74/0xbc el1irq+0xf0/0x1c0 archcpuidle+0x10/0x18 doidle+0x104/0x248 cpustartupentry+0x20/0x64 restinit+0xd0/0xdc archcallrestinit+0xc/0x14 startkernel+0x480/0x4b8 Code: f9400281 f94066a2 91405021 b94a0023 (f9406401)
Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53822.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/41efc47f5bc53e63461579e206adc17c4452ab6e
- https://git.kernel.org/stable/c/a06bfb3c9f69f303692cdae87bc0899d2ae8b2a6
- https://git.kernel.org/stable/c/e78526a06b53718bfc1dfff37864c7760e41f8ec
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53822.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-53822
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedd5c65159f2895379e11ca13f62feabe93278985dFixede78526a06b53718bfc1dfff37864c7760e41f8ecFixed41efc47f5bc53e63461579e206adc17c4452ab6eFixeda06bfb3c9f69f303692cdae87bc0899d2ae8b2a6