CVE-2023-53153None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on (re)connect and can hold data from a previous connection. Reset key data t…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Fix use after free for wext
Key information in wext.connect is not reset on (re)connect and can hold data from a previous connection.
Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP connection request and access the freed or already reused memory.
Additionally optimize cfg80211_sme_connect() and avoid an useless schedule of conn_work.
Linux >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 66af4a2ab1d65d556d638cb9555a3b823c2557a9Linux >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < a2a92b3e9d8e03ee3f9ee407fc46a9b4bd02d8b6Linux >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 6f1959c17d4cb5b74af6fc31dc787e1dc3e4f6e2Linux >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 2cfe78619b0de6d2da773978bc2d22797212eaa7Linux >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < fd081afd21eb35b968b0330700c43ec94986e1c4Linux >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 22dfb21bf1cd876616d45cda1bc6daa89eec6747Linux >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < f4b6a138efb8a32507b8946104e32cb926308da7Linux >= fffd0934b9390f34bec45762192b7edd3b12b4b5 < 015b8cc5e7c4d7bb671f1984d7b7338c310b185bLinux 2.6.32Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses