SECUFOCUSNOW
Home›CVE index›CVE-2023-54286
Review reviewHigh

CVE-2023-54286

Linux

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over overflows the iwl_keyinfo.key field. Add a check to not copy more data to iwl_keyinfo.key then will fit. This fixes backtraces like this one: memcpy: detected field-spanning write (size 32) of single field "sta_cmd.key.key" at drivers/net/wireless/intel/iwlwifi/dvm/sta.c:1103 (size 16) WARNING: CPU: 1 PID: 946 at drivers/...

CVSS
7.6
EPSS
0.28%
20.0% percentile
CISA KEV
Not listed
Published
2025.12.30
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.28%
Technical severityCVSS 7.6

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over overflows the iwl_keyinfo.key field. Add a check to not copy more data to iwl_keyinfo.key then will fit. This fixes backtraces like this one: memcpy: detected field-spanning write (size 32) of single field "sta_cmd.key.key" at drivers/net/wireless/intel/iwlwifi/dvm/sta.c:1103 (size 16) WARNING: CPU: 1 PID: 946 at drivers/...

Affected product and versions

Product
Linux
Affected versions
>= 5a3d9882b84edf5fa8e8ca33a5d6df25e2e727a5 < 76b5ea43ad2fb4f726ddfaff839430a706e7d7c2, >= 5a3d9882b84edf5fa8e8ca33a5d6df25e2e727a5 < 3ed3c1c2fc3482b72e755820261779cd2e2c5a3e, >= 5a3d9882b84edf5fa8e8ca33a5d6df25e2e727a5 < fa57021262e998e2229d6383b1081638df2fe238, >= 5a3d9882b84edf5fa8e8ca33a5d6df25e2e727a5 < 91ad1ab3cc7e981cb6d6ee100686baed64e1277e, >= 5a3d9882b84edf5fa8e8ca33a5d6df25e2e727a5 < 87940e4030e4705e1f3fd2bbb1854eae8308314b, >= 5a3d9882b84edf5fa8e8ca33a5d6df25e2e727a5 < 57189c885149825be8eb8c3524b5af017fdeb941, >= 5a3d9882b84edf5fa8e8ca33a5d6df25e2e727a5 < 6cd644f66b43709816561d63e0173cb0c7aab159, >= 5a3d9882b84edf5fa8e8ca33a5d6df25e2e727a5 < ef16799640865f937719f0771c93be5dca18adc6, >= 3.1
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE
Not available
CVE-2023-54286 — Linux | SECUFOCUS NOW