In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require the full 3-address header to avoid accessing invalid memory if shorter frames are passed in.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/3beb97bed860d95b14ad23578ce8ddaea62023db cve-icon cve-icon
https://git.kernel.org/stable/c/672205c6f2d11978fcd7f0f336bb2c708e28874b cve-icon cve-icon
https://git.kernel.org/stable/c/89a41ed7f21476301659ebd25ccb48a60791c1a7 cve-icon cve-icon
https://git.kernel.org/stable/c/b9a175e3b250b0dc6e152988040aa5014e98e61e cve-icon cve-icon
https://git.kernel.org/stable/c/c64ee9dd335832d5e2ab0a8fc83a34ad4c729799 cve-icon cve-icon
https://git.kernel.org/stable/c/fba360a047d5eeeb9d4b7c3a9b1c8308980ce9a6 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091644-CVE-2023-53321-0003@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53321 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53321 cve-icon
History

Wed, 14 Jan 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 10 Dec 2025 18:45:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 17 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Tue, 16 Sep 2025 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require the full 3-address header to avoid accessing invalid memory if shorter frames are passed in.
Title wifi: mac80211_hwsim: drop short frames
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-16T16:11:57.206Z

Updated: 2026-01-14T18:32:58.479Z

Reserved: 2025-09-16T16:08:59.563Z

Link: CVE-2023-53321

cve-icon Vulnrichment

Updated: 2026-01-14T18:27:24.184Z

cve-icon NVD

Status : Modified

Published: 2025-09-16T17:15:38.173

Modified: 2026-01-14T19:16:25.940

Link: CVE-2023-53321

cve-icon Redhat

Severity : Important

Publid Date: 2025-09-16T00:00:00Z

Links: CVE-2023-53321 - Bugzilla