Review reviewHigh

CVE-2023-53822

Linux

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Ignore frags from uninitialized peer in dp. When max virtual ap interfaces are configured in all the bands with ACS and hostapd restart is done every 60s, a crash is observed at random times. In this certain scenario, a fragmented packet is received for self peer, for which rx_tid and rx_frags are not initialized in datapath. While handling this fragment, crash is observed as the rx_frag list is uninitialised and when we walk in ath11k_dp_rx_h_sort_frags, skb null leads to exception. To address this, before pr...

CVSS: 8.8
EPSS: 0.31%
CISA KEV: Not listed
Published: 2025.12.10

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.31%

Technical severityCVSS 8.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= d5c65159f2895379e11ca13f62feabe93278985d < e78526a06b53718bfc1dfff37864c7760e41f8ec, >= d5c65159f2895379e11ca13f62feabe93278985d < 41efc47f5bc53e63461579e206adc17c4452ab6e, >= d5c65159f2895379e11ca13f62feabe93278985d < a06bfb3c9f69f303692cdae87bc0899d2ae8b2a6, >= 5.6
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: Not available