PT-2025-18850 · Linux+3 · Linux Kernel+3

Published 2023-11-07 · Updated 2025-09-29 · CVE-2023-53086

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the wifi: mt76: connac component, where WED status is not checked for non-mmio devices. This can lead to a crash, as reported in the kernel logs. The vulnerability is related to the mt76 connac mcu add key function and other related functions such as mt7921 set key, drv set key, and ieee80211 key enable hw accel. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for this vulnerability. As a temporary workaround, consider disabling the wifi: mt76: connac component until a patch is available. Restrict access to the vulnerable mt76 connac mcu add key function and related functions to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

ALSA-2025_16880

CESA-2023_7077

CVE-2023-53086

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53086.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-53086 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53086 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53086 · Security Note
• https://git.kernel.org/stable/c/53edfda851dd1ce41ac049ce2f195dc41dd27cc1 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53086 · Vendor Advisory
• https://git.kernel.org/stable/c/5683e1488aa9b0805a9403d215e48fed29d6d923 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53086 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53086 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53086 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53086 · Security Note
• https://lore.kernel.org/linux-cve-announce/2025050218-CVE-2023-53086-a21d@gregkh/T · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-53086 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1918379193278091415 · Twitter Post