CVE-2023-52832

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
21/05/2024
Last modified:
05/01/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: mac80211: don&amp;#39;t return unset power in ieee80211_get_tx_power()<br /> <br /> We can get a UBSAN warning if ieee80211_get_tx_power() returns the<br /> INT_MIN value mac80211 internally uses for "unset power level".<br /> <br /> UBSAN: signed-integer-overflow in net/wireless/nl80211.c:3816:5<br /> -2147483648 * 100 cannot be represented in type &amp;#39;int&amp;#39;<br /> CPU: 0 PID: 20433 Comm: insmod Tainted: G WC OE<br /> Call Trace:<br /> dump_stack+0x74/0x92<br /> ubsan_epilogue+0x9/0x50<br /> handle_overflow+0x8d/0xd0<br /> __ubsan_handle_mul_overflow+0xe/0x10<br /> nl80211_send_iface+0x688/0x6b0 [cfg80211]<br /> [...]<br /> cfg80211_register_wdev+0x78/0xb0 [cfg80211]<br /> cfg80211_netdev_notifier_call+0x200/0x620 [cfg80211]<br /> [...]<br /> ieee80211_if_add+0x60e/0x8f0 [mac80211]<br /> ieee80211_register_hw+0xda5/0x1170 [mac80211]<br /> <br /> In this case, simply return an error instead, to indicate<br /> that no data is available.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.14.331 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.15 (including) 4.19.300 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.262 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.202 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.140 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.64 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.5.13 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.6 (including) 6.6.3 (excluding)