CVE-2023-53321

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211_hwsim: drop short frames

While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require the full 3-address header to avoid accessing invalid memory if shorter frames are passed in.

This vulnerability is rated as Moderate impact because exploitation requires local access and privileges to interact with virtual wireless interfaces, constraining the exposure in enterprise environments. The mac80211_hwsim driver is designed for software simulation and wireless testing scenarios, and it is not loaded by default on Red Hat Enterprise Linux systems. Standard deployments that do not run simulated Wi-Fi testing environments remain unaffected unless the driver has been explicitly loaded.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.