PT-2025-49713 · Hostap+3 · Hostapd+3

Published 2023-01-01 · Updated 2026-04-20 · CVE-2023-53822

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ath11k driver related to handling fragmented packets from an uninitialized peer in datapath (dp). Specifically, when a maximum number of virtual access point (AP) interfaces are configured across all bands with Access Control System (ACS) enabled, and hostapd is restarted frequently (every 60 seconds), a crash can occur. This happens when a fragmented packet is received for a self-peer where the rx tid and rx frags are not initialized. Attempting to process this fragment leads to a crash due to an uninitialized rx frag list and a subsequent null pointer dereference within the ath11k dp rx h sort frags function. The issue is addressed by checking a dp setup done flag before processing received fragments, ensuring the peer has completed its datapath peer setup for the fragment queue. If the flag is not set, the fragments are ignored.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-53822

Affected Products

Debian

Linux Kernel

Ath11K

Hostapd

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53822.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-53822 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53822 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53822 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53822 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53822 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53822 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53822 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53822 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53822 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/41efc47f5bc53e63461579e206adc17c4452ab6e · Note
• https://git.kernel.org/stable/c/e78526a06b53718bfc1dfff37864c7760e41f8ec · Note
• https://git.kernel.org/linus/a06bfb3c9f69f303692cdae87bc0899d2ae8b2a6 · Note