---
id: CVE-2023-53575
title: 'wifi: iwlwifi: mvm: fix potential array out of bounds access'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: iwlwifi: mvm: fix potential array out of bounds access

  Account for IWL_SEC_WEP_KEY_OFFSET when needed while verifying
  key_len size in iwl_mvm_sec_key_add().
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 5c75a208c2449c6ea24f07610cc052f6a352246c <
    133b1cd4d98bb8b272335c8e6b0e0c399c0b2ffa
  - >-
    Linux >= 5c75a208c2449c6ea24f07610cc052f6a352246c <
    637452360ecde9ac972d19416e9606529576b302
  - Linux 6.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:24:13.458615Z'
published: '2025-10-04'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:31:15.312Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-53575'
references:
  - url: 'https://git.kernel.org/stable/c/133b1cd4d98bb8b272335c8e6b0e0c399c0b2ffa'
  - url: 'https://git.kernel.org/stable/c/637452360ecde9ac972d19416e9606529576b302'
tags:
  - cve.org
epss: 0.00142
epssPercentile: 0.03571
ingestedAt: '2026-11-05T22:38:31.811Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: fix potential array out of bounds access

Account for IWL_SEC_WEP_KEY_OFFSET when needed while verifying
key_len size in iwl_mvm_sec_key_add().

## Affected

- `Linux >= 5c75a208c2449c6ea24f07610cc052f6a352246c < 133b1cd4d98bb8b272335c8e6b0e0c399c0b2ffa`
- `Linux >= 5c75a208c2449c6ea24f07610cc052f6a352246c < 637452360ecde9ac972d19416e9606529576b302`
- `Linux 6.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.