CVE-2023-53071

EUVD-2025-13202

02.05.2025, 16:15

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: do not run mt76_unregister_device() on unregistered hw

Trying to probe a mt7921e pci card without firmware results in a
successful probe where ieee80211_register_hw hasn't been called. When
removing the driver, ieee802111_unregister_hw is called unconditionally
leading to a kernel NULL pointer dereference.
Fix the issue running mt76_unregister_device routine just for registered
hw.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 15%

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	5.18 ≤ 𝑥 < 6.1.113
linux	linux_kernel	6.2 ≤ 𝑥 < 6.2.9
linux	linux_kernel	6.3:rc1
linux	linux_kernel	6.3:rc2
linux	linux_kernel	6.3:rc3

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	6.1.129-1 fixed
bookworm (security)	6.1.135-1 fixed
bullseye	5.10.223-1 not-affected
bullseye (security)	5.10.234-1 fixed
sid	6.12.25-1 fixed
trixie	6.12.22-1 fixed

openSUSE / SLES Releases

openSUSE Product

Release

cluster-md-kmp-default

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

dlm-kmp-default

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

gfs2-kmp-default

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

kernel-64kb

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

kernel-default

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

kernel-default-base

suse enterprise server 15 SP5

5.14.21-150500.55.110.1.150500.6.51.3

fixed

kernel-docs

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

kernel-macros

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

kernel-obs-build

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

kernel-source

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

kernel-syms

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

kernel-zfcpdump

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

ocfs2-kmp-default

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

reiserfs-kmp-default

suse enterprise server 15 SP5

5.14.21-150500.55.110.1

fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

bpftool

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:7.2.0-362.8.1.el9_3 fixed

kernel

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-64k

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-debug

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-debug-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-debug-devel

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-debug-devel-matched

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-debug-modules

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-debug-modules-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-debug-modules-extra

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-devel

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-devel-matched

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-modules

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-modules-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-64k-modules-extra

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-abi-stablelists

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-core

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-debug

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-debug-core

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-debug-devel

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-debug-devel-matched

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-debug-modules

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-debug-modules-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-debug-modules-extra

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-debug-uki-virt

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-devel

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-devel-matched

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-doc

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-modules

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-modules-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-modules-extra

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-rt

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-debug

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-debug-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-debug-devel

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-debug-kvm

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-debug-modules

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-debug-modules-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-debug-modules-extra

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-devel

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-kvm

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-modules

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-modules-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-rt-modules-extra

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-tools

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-tools-libs

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-tools-libs-devel

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-uki-virt

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-zfcpdump

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-zfcpdump-core

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-zfcpdump-devel

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-zfcpdump-devel-matched

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-zfcpdump-modules

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

kernel-zfcpdump-modules-core

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

kernel-zfcpdump-modules-extra

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

libperf

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

perf

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

python3-perf

RHEL 8	0:4.18.0-513.5.1.el8_9 fixed
RHEL 9	0:5.14.0-362.8.1.el9_3 fixed

rtla

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

RHEL 9

0:5.14.0-362.8.1.el9_3

fixed

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

https://git.kernel.org/stable/c/2d34f27714c97a9786a30b3bb54944d6d8ed612f

https://git.kernel.org/stable/c/41130c32f3a18fcc930316da17f3a5f3bc326aa1

https://git.kernel.org/stable/c/dffe86df26aee01a5fc56a175b7a7f157961e370