PT-2025-37544 · Linux+4 · Linux Kernel+4

Published

2023-01-01

·

Updated

2026-05-26

·

CVE-2023-53180

CVSS v2.0

6.0

Medium

VectorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains an issue in the ath12k driver related to management transmit cleanup. A missing reference to 'ar' in skb cb can lead to a NULL pointer dereference during interface removal and subsequent cleanup operations within the management txmgmt idr callback. This occurs when the 'ar' pointer from skb cb is used, potentially causing a system crash or unexpected behavior.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
BDU:2026-05993
CVE-2023-53180
ECHO-D629-915F-53D9
RHSA-2024:2394
RHSA-2024_2394
SUSE-SU-2025:03600-1
SUSE-SU-2025:03634-1
SUSE-SU-2025:20851-1
SUSE-SU-2025:20861-1
SUSE-SU-2025:20870-1
SUSE-SU-2025:20898-1
SUSE-SU-2025:3751-1
SUSE-SU-2025:4057-1
SUSE-SU-2025:4132-1
SUSE-SU-2025:4141-1

Affected Products

Astra Linux
Debian
Linux Kernel
Red Hat
Suse