CVE-2023-53554

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53554
In the Linux kernel, the following vulnerability has been resolved: staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() The "exc->key_len" is a u16 that comes from the user. If it's over IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5373a1aa91b2298f9305794b8270cf9896be96b6 Patch
https://git.kernel.org/stable/c/5f1c7031e044cb2fba82836d55cc235e2ad619dc Patch
https://git.kernel.org/stable/c/663fff29fd613e2b0d30c4138157312ba93c4939 Patch
https://git.kernel.org/stable/c/7ae9f55a495077f838bab466411ee6f38574df9b Patch
https://git.kernel.org/stable/c/9496fb96ddeb740dc6b966f4a7d8dfb8b93921c6 Patch
https://git.kernel.org/stable/c/b1b04b56745bc79286c80aa876fabfab1e08ebf1 Patch
https://git.kernel.org/stable/c/baf420e30364ef9efe3e29a5c0e01e612aebf3fe Patch
https://git.kernel.org/stable/c/caac4b6c15b66feae4d83f602e1e46f124540202 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
History

12 Feb 2026, 15:54

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/5373a1aa91b2298f9305794b8270cf9896be96b6 - () https://git.kernel.org/stable/c/5373a1aa91b2298f9305794b8270cf9896be96b6 - Patch
References () https://git.kernel.org/stable/c/5f1c7031e044cb2fba82836d55cc235e2ad619dc - () https://git.kernel.org/stable/c/5f1c7031e044cb2fba82836d55cc235e2ad619dc - Patch
References () https://git.kernel.org/stable/c/663fff29fd613e2b0d30c4138157312ba93c4939 - () https://git.kernel.org/stable/c/663fff29fd613e2b0d30c4138157312ba93c4939 - Patch
References () https://git.kernel.org/stable/c/7ae9f55a495077f838bab466411ee6f38574df9b - () https://git.kernel.org/stable/c/7ae9f55a495077f838bab466411ee6f38574df9b - Patch
References () https://git.kernel.org/stable/c/9496fb96ddeb740dc6b966f4a7d8dfb8b93921c6 - () https://git.kernel.org/stable/c/9496fb96ddeb740dc6b966f4a7d8dfb8b93921c6 - Patch
References () https://git.kernel.org/stable/c/b1b04b56745bc79286c80aa876fabfab1e08ebf1 - () https://git.kernel.org/stable/c/b1b04b56745bc79286c80aa876fabfab1e08ebf1 - Patch
References () https://git.kernel.org/stable/c/baf420e30364ef9efe3e29a5c0e01e612aebf3fe - () https://git.kernel.org/stable/c/baf420e30364ef9efe3e29a5c0e01e612aebf3fe - Patch
References () https://git.kernel.org/stable/c/caac4b6c15b66feae4d83f602e1e46f124540202 - () https://git.kernel.org/stable/c/caac4b6c15b66feae4d83f602e1e46f124540202 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-787
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
First Time Linux
Linux linux Kernel

04 Oct 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-04 16:15

Updated : 2026-02-12 15:54

NVD link : CVE-2023-53554

Mitre link : CVE-2023-53554

CVE.ORG link : CVE-2023-53554

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write