CVE-2023-53229

A data corruption issues was observed due to an uninitialized driver private data structures in the Linux kernel's wifi mac80211 subsystem. This could allow a local attacker to crash the system or leak kernel internal information.

This vulnerability is rated as Moderate severity because exploitation requires local access alongside the presence of active mac80211 wireless networking devices, limiting the potential blast radius. On standard Red Hat Enterprise Linux server installations, wireless hardware is typically absent or unconfigured, significantly minimizing exposure in production environments. An attacker on an affected system with operational Wi-Fi interfaces could induce improper station removal handling, resulting in a denial of service or potential kernel memory disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.