Skip to content
Heist/ feed
Back to feed
UnratedFix available

wifi: mac80211: check for station first in client probe

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check for station first in client probe When probing a client, first check if we have it, and then check for the channel context, otherwise you can trigger the warning there easily by probing when the AP isn't even started yet. Since a client existing means the AP is also operating, we can then keep the warning. Also simplify the moved code a bit.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.1.55, 6.5.5
CVEs
CVE-2023-53588
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 03:40 UTC · Revision 1

Source evidence

wifi: mac80211: check for station first in client probe

core-osv · Original source

Published 4 Oct 2025, 15:44 UTC

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check for station first in client probe When probing a client, first check if we have it, and then check for the channel context, otherwise you can trigger the warning there easily by probing when the AP isn't even started yet. Since a client existing means the AP is also operating, we can then keep the warning. Also simplify the moved code a bit.

osv:CVE-2023-53588

Kernel

Fixed versions: 6.1.55, 6.5.5

Complete source record
{
  "id": "aafd1c1c5ece3ca532574d8801f5b5d5ec649eac00fde1725e7a9ecb5c956af0",
  "url": "https://osv.dev/vulnerability/CVE-2023-53588",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "wifi: mac80211: check for station first in client probe",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check for station first in client probe When probing a client, first check if we have it, and then check for the channel context, otherwise you can trigger the warning there easily by probing when the AP isn't even started yet. Since a client existing means the AP is also operating, we can then keep the warning. Also simplify the moved code a bit.",
    "evidence": "osv:CVE-2023-53588",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.1.55",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.5.5",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2023-53588",
      "aliases": [
        "CVE-2023-53588"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "55de908ab292c03f1eb280f51170ddb9c6b57e31"
                },
                {
                  "fixed": "7e1cda5cf07f848e6b50b4e5e7761ffbce905a3d"
                },
                {
                  "fixed": "7dce2deb0b03aaf46c87ceedea81ef4153e26c40"
                },
                {
                  "fixed": "67dfa589aa8806c7959cbca2f4613b8d41c75a06"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53588.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "3.8.0"
                },
                {
                  "fixed": "6.1.55"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.5.5"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53588.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:25.785654297Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/67dfa589aa8806c7959cbca2f4613b8d41c75a06",
        "https://git.kernel.org/stable/c/7dce2deb0b03aaf46c87ceedea81ef4153e26c40",
        "https://git.kernel.org/stable/c/7e1cda5cf07f848e6b50b4e5e7761ffbce905a3d",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53588.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-53588",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53588.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2023-53588",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 492241,
  "published_at": "2025-10-04T15:44:03.354+00:00"
}