CVE-2023-52832

wifi: mac80211: don't return unset power in ieee80211_get_tx_power()

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() We can get a UBSAN warning if ieee80211_get_tx_power() returns the INT_MIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in net/wireless/nl80211.c:3816:5 -2147483648 * 100 cannot be represented in type 'int' CPU: 0 PID: 20433 Comm: insmod Tainted: G WC OE Call Trace: dump_stack+0x74/0x92 ubsan_epilogue+0x9/0x50 handle_overflow+0x8d/0xd0 __ubsan_handle_mul_overflow+0xe/0x10 nl80211_send_iface+0x688/0x6b0 [cfg80211] [...] cfg80211_register_wdev+0x78/0xb0 [cfg80211] cfg80211_netdev_notifier_call+0x200/0x620 [cfg80211] [...] ieee80211_if_add+0x60e/0x8f0 [mac80211] ieee80211_register_hw+0xda5/0x1170 [mac80211] In this case, simply return an error instead, to indicate that no data is available.

Category

9.1
CVSS
Severity: Critical
CVSS 3.1 •
EPSS 0.77% Top 30%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/1571120c44dbe5757aee1612c5b6097cdc42710f patch
https://git.kernel.org/stable/c/298e767362cade639b7121ecb3cc5345b6529f62 patch
https://git.kernel.org/stable/c/efeae5f4972f75d50002bc50eb112ab9e7069b18 patch
https://git.kernel.org/stable/c/717de20abdcd1d4993fa450e28b8086a352620ea patch
https://git.kernel.org/stable/c/21a0f310a9f3bfd2b4cf4f382430e638607db846 patch
https://git.kernel.org/stable/c/2be24c47ac19bf639c48c082486c08888bd603c6 patch
https://git.kernel.org/stable/c/adc2474d823fe81d8da759207f4f1d3691aa775a patch
https://git.kernel.org/stable/c/5a94cffe90e20e8fade0b9abd4370bd671fe87c7 patch
https://git.kernel.org/stable/c/e160ab85166e77347d0cbe5149045cb25e83937f patch

Frequently Asked Questions

What is the severity of CVE-2023-52832?
CVE-2023-52832 has been scored as a critical severity vulnerability.
How to fix CVE-2023-52832?
To fix CVE-2023-52832, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-52832 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2023-52832 is being actively exploited. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-52832?
CVE-2023-52832 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.