CVE-2023-53589

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the iwlwifi mvm module where it incorrectly trusts the number of channels (n channels) reported by the firmware. A corrupted response from the firmware with an excessively large n channels value can lead to out-of-bounds memory access during the copy operation of the firmware response, potentially causing a system crash. The issue arises because the code does not adequately validate the length of the firmware response before copying data into a buffer allocated for it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.