PT-2023-9847 · Linux+10 · Linux Kernel+10

Dan Carpenter

·

Published

2023-09-19

·

Updated

2025-09-29

·

CVE-2023-52530

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a potential key use-after-free in the wifi: mac80211 component of the Linux kernel. When ieee80211 key link() is called by ieee80211 gtk rekey add() but returns 0 due to KRACK protection (identical key reinstall), ieee80211 gtk rekey add() will still return a pointer into the key, in a potential use-after-free. This normally doesn't happen since it's only called by iwlwifi in case of WoWLAN rekey offload which has its own KRACK protection, but still better to fix, do that by returning an error code and converting that to success on the cfg80211 boundary only, leaving the error for bad callers of ieee80211 gtk rekey add().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:5101
ALSA-2024:5102
ALSA-2025_16880
BDU:2025-00782
CESA-2024_5101
CESA-2024_5102
CVE-2023-52530
DLA-4075-1
INFSA-2024_5101
INFSA-2024_5102
OESA-2024-1482
OESA-2024-1483
OESA-2024-1484
OESA-2024-1485
OESA-2024-1486
OESA-2024-1487
OPENSUSE-SU-2024_0857-1
OPENSUSE-SU-2024_1322-1
OPENSUSE-SU-2024_1322-2
OPENSUSE-SU-2024_1466-1
OPENSUSE-SU-2024_1480-1
RHSA-2024:3859
RHSA-2024:4740
RHSA-2024:5101
RHSA-2024:5102
RHSA-2024_5101
RHSA-2024_5102
RLSA-2024:5101
RLSA-2024:5102
RXSA-2024:5101
SUSE-SU-2024:0855-1
SUSE-SU-2024:0856-1
SUSE-SU-2024:0857-1
SUSE-SU-2024:0900-1
SUSE-SU-2024:0900-2
SUSE-SU-2024:0925-1
SUSE-SU-2024:0926-1
SUSE-SU-2024:0975-1
SUSE-SU-2024:0976-1
SUSE-SU-2024:0977-1
SUSE-SU-2024:1466-1
SUSE-SU-2024:1480-1
USN-6775-1
USN-6775-2
USN-6776-1
USN-6777-1
USN-6777-2
USN-6777-3
USN-6777-4
USN-6778-1
USN-6795-1
USN-6828-1

Affected Products

Almalinux
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu