{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2023-53822 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2023-53822 is a high-severity vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2023-53822 and fix it if it is affected.\n\nWhat it is: CVE-2023-53822 is a high-severity vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2023-53822 in the wild and no public exploit code.\n\nAffected product: Linux. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2023-53822/ (Markdown: https://insights.sbomify.com/CVE-2023-53822/index.md)","id":"CVE-2023-53822","markdown":"https://insights.sbomify.com/CVE-2023-53822/index.md","name":"CVE-2023-53822","record":{"aliases":["BELL-CVE-2023-53822","DEBIAN-CVE-2023-53822","GHSA-pvmh-4xqr-52x7","ROOT-OS-DEBIAN-11-CVE-2023-53822","ROOT-OS-UBUNTU-2204-CVE-2023-53822","UBUNTU-CVE-2023-53822"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":true,"product_category":"Linux kernel WiFi driver","requires_auth":"none","summary":"A null pointer dereference in the ath11k WiFi driver causes a kernel crash when processing fragments from uninitialized peers, leading to denial of service.","user_interaction":"not_required","vuln_class":"null_dereference"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[],"cvss":{"score":8.8,"severity":"high","source":"cna","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: Ignore frags from uninitialized peer in dp.\n\nWhen max virtual ap interfaces are configured in all the bands with\nACS and hostapd restart is done every 60s, a crash is observed at\nrandom times.\nIn this certain scenario, a fragmented packet is received for\nself peer, for which rx_tid and rx_frags are not initialized in\ndatapath. While handling this fragment, crash is observed as the\nrx_frag list is uninitialised and when we walk in\nath11k_dp_rx_h_sort_frags, skb null leads to exception.\n\nTo address this, before processing received fragments we check\ndp_setup_done flag is set to ensure that peer has completed its\ndp peer setup for fragment queue, else ignore processing the\nfragments.\n\nCall trace:\n  ath11k_dp_process_rx_err+0x550/0x1084 [ath11k]\n  ath11k_dp_service_srng+0x70/0x370 [ath11k]\n  0xffffffc009693a04\n  __napi_poll+0x30/0xa4\n  net_rx_action+0x118/0x270\n  __do_softirq+0x10c/0x244\n  irq_exit+0x64/0xb4\n  __handle_domain_irq+0x88/0xac\n  gic_handle_irq+0x74/0xbc\n  el1_irq+0xf0/0x1c0\n  arch_cpu_idle+0x10/0x18\n  do_idle+0x104/0x248\n  cpu_startup_entry+0x20/0x64\n  rest_init+0xd0/0xdc\n  arch_call_rest_init+0xc/0x14\n  start_kernel+0x480/0x4b8\n  Code: f9400281 f94066a2 91405021 b94a0023 (f9406401)\n\nTested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"wifi: ath11k: Ignore frags from uninitialized peer in dp.","id":"CVE-2023-53822","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"null_dereference","year":"2023"},"n_packages":0,"n_references":3,"next":{"headline":"block/rq_qos: protect rq_qos apis with a new lock","id":"CVE-2023-53823"},"packages":[],"prev":{"headline":"ip6_vti: fix slab-use-after-free in decode_session6","id":"CVE-2023-53821"},"products":["Linux"],"published":"2025-12-09","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"total"},"state":"PUBLISHED","updated":"2026-10-15","vendors":["Linux"]},"summary":"A null pointer dereference in the ath11k WiFi driver causes a kernel crash when processing fragments from uninitialized peers, leading to denial of service.","url":"https://insights.sbomify.com/CVE-2023-53822/"}