CVE-2023-53554
kernel: staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · October 4, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
The "exc->key_len" is a u16 that comes from the user. If it's over IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.
Statement
This vulnerability does not affect Red Hat Enterprise Linux as the staging ks7010 wireless driver is not enabled or distributed in supported Red Hat kernels. The flaw involves potential memory corruption caused by unchecked encoding token lengths when configuring wireless encryption keys. Because the affected staging driver is omitted from standard enterprise kernel builds, Red Hat environments are not exposed to this issue.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified