CVE-2023-53589

CVE-2023-53589 affects the Linux kernel wifi driver (iwlwifi, mvm). The issue arises if the firmware returns a corrupted MCC response with n_channels larger than the command response, potentially causing out-of-bounds reads of uninitialized memory and a crash when n_channels is large enough. The ...