CVE-2023-53575
BaseFortify
Publication date: 2025-10-04
Last updated on: 2026-03-21
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 6.2 (inc) to 6.4.7 (inc) |
| intel | iwlwifi | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential array out of bounds access issue in the Linux kernel's iwlwifi driver. Specifically, it relates to the handling of the key length verification in the function iwl_mvm_sec_key_add(), where the code did not properly account for IWL_SEC_WEP_KEY_OFFSET, potentially leading to accessing memory outside the intended array bounds.
How can this vulnerability impact me? :
The vulnerability could lead to memory corruption or unexpected behavior in the wireless driver, which might be exploited to cause system instability, crashes, or potentially allow an attacker to execute arbitrary code or escalate privileges on the affected system.