CVE Database›Document archive›CVE-2023-53554

CVE-2023-53554

kernel: staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · October 4, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()

The "exc->key_len" is a u16 that comes from the user. If it's over IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.

Statement

This vulnerability does not affect Red Hat Enterprise Linux as the staging ks7010 wireless driver is not enabled or distributed in supported Red Hat kernels. The flaw involves potential memory corruption caused by unchecked encoding token lengths when configuring wireless encryption keys. Because the affected staging driver is omitted from standard enterprise kernel builds, Red Hat environments are not exposed to this issue.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified