Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-53717— wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于WMI响应回调函数在超时后写入无效的栈分配缓冲区，可能导致栈越界写入。

AI Predicted 7.8 Difficulty: Moderate EPSS 0.21% · P11

Possible ATT&CK Techniques 1 AI

T1206

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux fb9987d0f748c983bb795a86f47522313f701a08< 89a33c3c847b19b19205cde1d924df2a6c70d8eb affected
fb9987d0f748c983bb795a86f47522313f701a08< ae4933b4f17de8e2b7ff6f91b17d3b0099a6d6bc affected
fb9987d0f748c983bb795a86f47522313f701a08< bf6dc175a2b53098a69db1236d9d53982f4b1bc0 affected
fb9987d0f748c983bb795a86f47522313f701a08< 78b56b0a613a87b61290b95be497fdfe2fe58aa6 affected
fb9987d0f748c983bb795a86f47522313f701a08< 1af7eacfad45149c54893a8a9df9e92ef89f0a90 affected
fb9987d0f748c983bb795a86f47522313f701a08< 8f28513d9520184059530c01a9f928a1b3809d3f affected
fb9987d0f748c983bb795a86f47522313f701a08< 554048a72d7ecfdd58cc1bfb56e0a1864e64e82c affected
fb9987d0f748c983bb795a86f47522313f701a08< 8a2f35b9830692f7a616f2f627f943bc748af13a affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-53717

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() Fix a stack-out-of-bounds write that occurs in a WMI response callback function that is called after a timeout occurs in ath9k_wmi_cmd(). The callback writes to wmi->cmd_rsp_buf, a stack-allocated buffer that could no longer be valid when a timeout occurs. Set wmi->last_seq_id to 0 when a timeout occurred. Found by a modified version of syzkaller. BUG: KASAN: stack-out-of-bounds in ath9k_wmi_ctrl_rx Write of size 4 Call Trace: memcpy ath9k_wmi_ctrl_rx ath9k_htc_rx_msg ath9k_hif_usb_reg_in_cb __usb_hcd_giveback_urb usb_hcd_giveback_urb dummy_timer call_timer_fn run_timer_softirq __do_softirq irq_exit_rcu sysvec_apic_timer_interrupt
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于WMI响应回调函数在超时后写入无效的栈分配缓冲区，可能导致栈越界写入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux fb9987d0f748c983bb795a86f47522313f701a08 ~ 89a33c3c847b19b19205cde1d924df2a6c70d8eb -
Linux Linux 2.6.35 -

II. Public POCs for CVE-2023-53717

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-53717

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-10-22 · 67 CVEs total

CVE-2023-53711 8.2 HIGH NFS: Fix a potential data corruption
CVE-2023-53705 8.2 HIGH ipv6: Fix out-of-bounds access in ipv6_find_tlv()
CVE-2023-53713 7.8 HIGH arm64: sme: Use STR P to clear FFR context field in streaming SVE mode
CVE-2022-50581 7.8 HIGH hfs: fix OOB Read in __hfs_brec_find
CVE-2023-53718 7.8 HIGH ring-buffer: Do not swap cpu_buffer during resize process
CVE-2022-50569 7.8 HIGH xfrm: Update ipcomp_scratches with NULL when freed
CVE-2022-50570 7.8 HIGH platform/chrome: fix memory corruption in ioctl
CVE-2022-50567 7.8 HIGH fs: jfs: fix shift-out-of-bounds in dbAllocAG
CVE-2023-53707 7.8 HIGH drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
CVE-2023-53692 7.8 HIGH ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
CVE-2023-53729 7.8 HIGH soc: qcom: qmi_encdec: Restrict string length in decode
CVE-2023-53698 7.8 HIGH xsk: fix refcount underflow in error path
CVE-2023-53695 7.8 HIGH udf: Detect system inodes linked into directory hierarchy
CVE-2023-53726 7.1 HIGH arm64: csum: Fix OoB access in IP checksum code for negative lengths
CVE-2023-53719 serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
CVE-2023-53708 ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
CVE-2023-53704 clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
CVE-2023-53712 ARM: 9317/1: kexec: Make smp stop calls asynchronous
CVE-2023-53702 s390/crypto: use vector instructions only if available for ChaCha20
CVE-2023-53710 wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read

Showing top 20 of 67 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-53717

No comments yet

Leave a comment