CVE-2023-52530: wifi: mac80211: fix potential key use-after-free
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: fix potential key use-after-free
The Linux kernel CVE team has assigned CVE-2023-52530 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024030255-CVE-2023-52530-ebf0@gregkh/T/#u
Other sources
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: fix potential key use-after-free
When ieee80211keylink() is called by ieee80211gtkrekeyadd() but returns 0 due to KRACK protection (identical key reinstall), ieee80211gtkrekeyadd() will still return a pointer into the key, in a potential use-after-free. This normally doesn't happen since it's only called by iwlwifi in case of WoWLAN rekey offload which has its own KRACK protection, but still better to fix, do that by returning an error code and converting that to success on the cfg80211 boundary only, leaving the error for bad callers of ieee80211gtkrekeyadd().
— NVD
Linux Kernel is vulnerable to a denial of service, caused by use-after-free in ieee80211keylink in mac80211. By sending a specially crafted request, a local attacker could exploit this vulnerability to a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52530?
CVE-2023-52530 is considered a moderate severity vulnerability due to its potential for a key use-after-free issue in the Linux kernel.
How do I fix CVE-2023-52530?
To address CVE-2023-52530, update your Linux kernel to at least version 6.1.57, 6.5.7, or 6.6.
Which Linux kernel versions are affected by CVE-2023-52530?
CVE-2023-52530 affects multiple Linux kernel versions, specifically those prior to 6.1.57, 6.5.7, and 6.6.
Can CVE-2023-52530 be exploited remotely?
CVE-2023-52530 could potentially be exploited remotely, depending on the context in which the vulnerable kernel is used.
Is there a known exploit for CVE-2023-52530?
As of now, there are no publicly available exploits specifically targeting CVE-2023-52530.