01 Record

CVE-2023-52530

wifi: mac80211: fix potential key use-after-free

HighPUBLISHEDCNA: Linux

CNA base score8.8 CVSS v3.xCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

wifi: mac80211: fix potential key use-after-free

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.34% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 26.7% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-03-02 21:52Z2 YR AGO

Last updated

2026-08-05 09:10Z1 MO AGO

Reserved

2024-02-20

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

48431aec6d33a6a93b5b0056d47fd8f8a5aaeec9f248ee64ae2bced9c920a2cd

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxfdf7cb4185b60c68e1a75e61691c4afdc15dea0e to < 2408f491ff998d674707725eadc47d8930aced09, fdf7cb4185b60c68e1a75e61691c4afdc15dea0e to < e8e599a635066c50ac214c3e10858f1d37e03022, fdf7cb4185b60c68e1a75e61691c4afdc15dea0e to < e8a834eb09bb95c2bf9c76f1a28ecef7d8c439d0, fdf7cb4185b60c68e1a75e61691c4afdc15dea0e to < 2f4e16e39e4f5e78248dd9e51276a83203950b36, fdf7cb4185b60c68e1a75e61691c4afdc15dea0e to < 65c72a7201704574dace708cbc96a8f367b1491d, fdf7cb4185b60c68e1a75e61691c4afdc15dea0e to < 31db78a4923ef5e2008f2eed321811ca79e7f71b, ef810e7c3d2a8fb3bbd23726599c487c30ea747e, a0a8a11d1630cd648dc1ce86da620b4e240e0315, 6891c6fd2a500d1f39d1426765f610bdc2c2a39d, 003aa22c9619b49efe950aca3aebd1235a04940d, 6440f0ee8a1779f53526bccb9de00914daeb9094, 2586fa0007dc6b7745da14250be7e3aae706b128, a9ab1b2e30e898440a22d7b1d7a5b0b7c6a8791f, 3.2.95 to < 3.3, 3.16.50 to < 3.17, 3.18.82 to < 3.19, 4.1.47 to < 4.2, 4.4.99 to < 4.5, 4.9.63 to < 4.10, 4.13.14 to < 4.14, 4.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/2408f491ff998d674707725eadc47d8930aced09
git.kernel.orghttps://git.kernel.org/stable/c/e8e599a635066c50ac214c3e10858f1d37e03022
git.kernel.orghttps://git.kernel.org/stable/c/e8a834eb09bb95c2bf9c76f1a28ecef7d8c439d0
git.kernel.orghttps://git.kernel.org/stable/c/2f4e16e39e4f5e78248dd9e51276a83203950b36
git.kernel.orghttps://git.kernel.org/stable/c/65c72a7201704574dace708cbc96a8f367b1491d
git.kernel.orghttps://git.kernel.org/stable/c/31db78a4923ef5e2008f2eed321811ca79e7f71b
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2023-52530

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2023-52530

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References