CVE-2023-53321 (GCVE-0-2023-53321)

Vulnerability from cvelistv5 – Published: 2025-09-16 16:11 – Updated: 2026-08-05 09:13
VLAI
Title
wifi: mac80211_hwsim: drop short frames
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require the full 3-address header to avoid accessing invalid memory if shorter frames are passed in.
Severity
7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-14 18:27 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < 3beb97bed860d95b14ad23578ce8ddaea62023db (git)
Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < 672205c6f2d11978fcd7f0f336bb2c708e28874b (git)
Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < c64ee9dd335832d5e2ab0a8fc83a34ad4c729799 (git)
Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < b9a175e3b250b0dc6e152988040aa5014e98e61e (git)
Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < 89a41ed7f21476301659ebd25ccb48a60791c1a7 (git)
Affected: 05d610af3e71a782fa28a1351b687da982d208ee , < fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.4
Unaffected: 0 , < 5.4 (semver)
Unaffected: 5.4.257 , ≤ 5.4.* (semver)
Unaffected: 5.10.197 , ≤ 5.10.* (semver)
Unaffected: 5.15.133 , ≤ 5.15.* (semver)
Unaffected: 6.1.55 , ≤ 6.1.* (semver)
Unaffected: 6.5.5 , ≤ 6.5.* (semver)
Unaffected: 6.6 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-53321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T18:27:28.261822Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T18:32:58.479Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/virtual/mac80211_hwsim.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3beb97bed860d95b14ad23578ce8ddaea62023db",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "672205c6f2d11978fcd7f0f336bb2c708e28874b",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "c64ee9dd335832d5e2ab0a8fc83a34ad4c729799",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "b9a175e3b250b0dc6e152988040aa5014e98e61e",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "89a41ed7f21476301659ebd25ccb48a60791c1a7",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            },
            {
              "lessThan": "fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6",
              "status": "affected",
              "version": "05d610af3e71a782fa28a1351b687da982d208ee",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/virtual/mac80211_hwsim.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "lessThan": "5.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.197",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.133",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.257",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.197",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.133",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.55",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.5",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: drop short frames\n\nWhile technically some control frames like ACK are shorter and\nend after Address 1, such frames shouldn\u0027t be forwarded through\nwmediumd or similar userspace, so require the full 3-address\nheader to avoid accessing invalid memory if shorter frames are\npassed in."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached via the MAC80211_HWSIM generic netlink HWSIM_CMD_FRAME command (sendmsg on a local genetlink socket into hwsim_cloned_frame_received_nl), not via on-air Wi\u2011Fi frames or a remote network protocol; virtio is an alternate local/VM-test path, still not Network/Adjacent.\nAC:L - Once the attacker is the registered wmediumd for a radio (or virtio mode is enabled), they fully control HWSIM_ATTR_FRAME length and can reliably send a frame shorter than sizeof(struct ieee80211_hdr_3addr) with no race or other attacker-uncontrollable condition.\nPR:L - HWSIM_CMD_FRAME itself has no genl capability flag, but injecting frames requires being the registered wmediumd; HWSIM_CMD_REGISTER (and NEW_RADIO) use GENL_UNS_ADMIN_PERM, which is CAP_NET_ADMIN in the caller\u0027s user_ns and is obtainable by an unprivileged user via user+net namespaces.\nUI:N - The attacker triggers the path entirely with their own netlink REGISTER/NEW_RADIO and FRAME messages; no separate victim action is required.\nS:U - The invalid read and any resulting fault stay inside the host kernel mac80211_hwsim/mac80211 authority and do not cross a VM, IOMMU, or sandbox boundary on the primary netlink attack path.\nC:H - Short frames cause mac80211_hwsim_rx to read hdr-\u003eaddr1/addr2 past the copied skb payload into uninitialized/out-of-bounds skb-head heap memory (KMSAN uninit-value), which is an OOB read of kernel memory and scores Confidentiality High under the OOB-read guidance.\nI:N - The defect is a read of uninitialized/past-end frame header bytes only; there is no OOB write, UAF, or other integrity or control-flow corruption primitive, and mac80211 later length-checks before further parsing.\nA:H - Accessing past the valid frame data into invalid skb memory can produce a kernel fault/oops under memory debugging or tight allocations (as reflected by the sanitizer finding that motivated the fix), so Availability is scored High."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:13:30.113Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db"
        },
        {
          "url": "https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b"
        },
        {
          "url": "https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799"
        },
        {
          "url": "https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e"
        },
        {
          "url": "https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7"
        },
        {
          "url": "https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6"
        }
      ],
      "title": "wifi: mac80211_hwsim: drop short frames",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53321",
    "datePublished": "2025-09-16T16:11:57.206Z",
    "dateReserved": "2025-09-16T16:08:59.563Z",
    "dateUpdated": "2026-08-05T09:13:30.113Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53321",
      "date": "2026-08-16",
      "epss": "0.00139",
      "percentile": "0.03736"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53321\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-16T17:15:38.173\",\"lastModified\":\"2026-06-17T06:44:52.993\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nwifi: mac80211_hwsim: drop short frames\\n\\nWhile technically some control frames like ACK are shorter and\\nend after Address 1, such frames shouldn\u0027t be forwarded through\\nwmediumd or similar userspace, so require the full 3-address\\nheader to avoid accessing invalid memory if shorter frames are\\npassed in.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/wireless/virtual/mac80211_hwsim.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"3beb97bed860d95b14ad23578ce8ddaea62023db\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"672205c6f2d11978fcd7f0f336bb2c708e28874b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"c64ee9dd335832d5e2ab0a8fc83a34ad4c729799\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"b9a175e3b250b0dc6e152988040aa5014e98e61e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"89a41ed7f21476301659ebd25ccb48a60791c1a7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"05d610af3e71a782fa28a1351b687da982d208ee\",\"lessThan\":\"fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/wireless/virtual/mac80211_hwsim.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.4\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.4\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.257\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.197\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.133\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.55\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.5\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-01-14T18:27:28.261822Z\",\"id\":\"CVE-2023-53321\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.4.257\",\"matchCriteriaId\":\"5189D8C7-0B76-4ACB-930C-2CEC2C2C7D8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.197\",\"matchCriteriaId\":\"FD17EA9A-DF74-4876-AADC-C204F0716961\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.133\",\"matchCriteriaId\":\"21236FF3-9B2C-4C1A-8780-BC5BCA44AA51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.55\",\"matchCriteriaId\":\"0EFCF8E8-5528-46B9-8C17-B09792899CE0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.5.5\",\"matchCriteriaId\":\"8CF71E85-DA24-4925-95C5-E5C15DA71AE6\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-29T22:17:36+00:00",
      "cve": "CVE-2023-53321",
      "id": "CVE-2023-53321",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "279",
      "product_status:known_affected": "70",
      "product_status:known_not_affected": "118",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: wifi: mac80211_hwsim: drop short frames",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53321.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-08-05T01:04:49Z",
      "cve": "CVE-2023-53321",
      "id": "CVE-2023-53321",
      "initial_release_date": "2025-09-16T23:29:29Z",
      "product_status:known_affected": "417",
      "product_status:known_not_affected": "38",
      "product_status:recommended": "725",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53321",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53321.json",
      "version": "61"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.1, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-53321\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-14T18:27:28.261822Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"description\": \"CWE-noinfo Not enough information\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-14T18:27:24.184Z\"}}], \"cna\": {\"title\": \"wifi: mac80211_hwsim: drop short frames\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"3beb97bed860d95b14ad23578ce8ddaea62023db\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"672205c6f2d11978fcd7f0f336bb2c708e28874b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"c64ee9dd335832d5e2ab0a8fc83a34ad4c729799\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"b9a175e3b250b0dc6e152988040aa5014e98e61e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"89a41ed7f21476301659ebd25ccb48a60791c1a7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"05d610af3e71a782fa28a1351b687da982d208ee\", \"lessThan\": \"fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/net/wireless/virtual/mac80211_hwsim.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.4\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.4\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.4.257\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.197\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.133\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.55\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.5.5\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.5.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/net/wireless/virtual/mac80211_hwsim.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db\"}, {\"url\": \"https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b\"}, {\"url\": \"https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799\"}, {\"url\": \"https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e\"}, {\"url\": \"https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7\"}, {\"url\": \"https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nwifi: mac80211_hwsim: drop short frames\\n\\nWhile technically some control frames like ACK are shorter and\\nend after Address 1, such frames shouldn\u0027t be forwarded through\\nwmediumd or similar userspace, so require the full 3-address\\nheader to avoid accessing invalid memory if shorter frames are\\npassed in.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.257\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.197\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.133\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.55\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.5.5\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6\", \"versionStartIncluding\": \"5.4\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-01-05T10:19:26.112Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-53321\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-14T18:32:58.479Z\", \"dateReserved\": \"2025-09-16T16:08:59.563Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2025-09-16T16:11:57.206Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.