NVD

CVE-2023-52832 Detail

Modified After Enrichment

This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() We can get a UBSAN warning if ieee80211_get_tx_power() returns the INT_MIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in net/wireless/nl80211.c:3816:5 -2147483648 * 100 cannot be represented in type 'int' CPU: 0 PID: 20433 Comm: insmod Tainted: G WC OE Call Trace: dump_stack+0x74/0x92 ubsan_epilogue+0x9/0x50 handle_overflow+0x8d/0xd0 __ubsan_handle_mul_overflow+0xe/0x10 nl80211_send_iface+0x688/0x6b0 [cfg80211] [...] cfg80211_register_wdev+0x78/0xb0 [cfg80211] cfg80211_netdev_notifier_call+0x200/0x620 [cfg80211] [...] ieee80211_if_add+0x60e/0x8f0 [mac80211] ieee80211_register_hw+0xda5/0x1170 [mac80211] In this case, simply return an error instead, to indicate that no data is available.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

ADP: CISA-ADP

Base Score: 9.1 CRITICAL

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/1571120c44dbe5757aee1612c5b6097cdc42710f	CVE	Patch
https://git.kernel.org/stable/c/21a0f310a9f3bfd2b4cf4f382430e638607db846	CVE, kernel.org	Patch
https://git.kernel.org/stable/c/298e767362cade639b7121ecb3cc5345b6529f62	CVE	Patch
https://git.kernel.org/stable/c/2be24c47ac19bf639c48c082486c08888bd603c6	CVE, kernel.org	Patch
https://git.kernel.org/stable/c/5a94cffe90e20e8fade0b9abd4370bd671fe87c7	CVE, kernel.org	Patch
https://git.kernel.org/stable/c/717de20abdcd1d4993fa450e28b8086a352620ea	CVE, kernel.org	Patch
https://git.kernel.org/stable/c/adc2474d823fe81d8da759207f4f1d3691aa775a	CVE, kernel.org	Patch
https://git.kernel.org/stable/c/e160ab85166e77347d0cbe5149045cb25e83937f	CVE, kernel.org	Patch
https://git.kernel.org/stable/c/efeae5f4972f75d50002bc50eb112ab9e7069b18	CVE	Patch

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-920	Improper Restriction of Power Consumption	CISA-ADP

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

8 change records found show changes

CVE Modified by CISA-ADP 6/17/2026 2:43:41 AM

Action

Type

Old Value

New Value

Added

Affected

[{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"1da177e4c3f4","status":"affected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"4.14.331","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"4.19.300","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"5.4.262","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"5.10.202","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"5.15.140","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.1.64","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.5.13","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.6.3","status":"unaffected"}]},{"vendor":"linux","product":"linux_kernel","defaultStatus":"unknown","cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"versions":[{"version":"6.7","status":"unaffected"}]}]

Added

SSVC

{"timestamp":"2024-05-21T19:51:54.630981Z","id":"CVE-2023-52832","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

CVE Modified by kernel.org 6/17/2026 2:43:41 AM

Action

Type

Old Value

New Value

Added

Affected

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/mac80211/cfg.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde","lessThan":"717de20abdcd1d4993fa450e28b8086a352620ea","versionType":"git","status":"affected"},{"version":"db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde","lessThan":"21a0f310a9f3bfd2b4cf4f382430e638607db846","versionType":"git","status":"affected"},{"version":"db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde","lessThan":"2be24c47ac19bf639c48c082486c08888bd603c6","versionType":"git","status":"affected"},{"version":"db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde","lessThan":"adc2474d823fe81d8da759207f4f1d3691aa775a","versionType":"git","status":"affected"},{"version":"db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde","lessThan":"5a94cffe90e20e8fade0b9abd4370bd671fe87c7","versionType":"git","status":"affected"},{"version":"db6d9e9e8b48b7ab68c61553eb5fa68534dd0fde","lessThan":"e160ab85166e77347d0cbe5149045cb25e83937f","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/mac80211/cfg.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.7","status":"affected"},{"version":"0","lessThan":"5.7","versionType":"semver","status":"unaffected"},{"version":"5.10.202","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.140","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.64","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.5.13","lessThanOrEqual":"6.5.*","versionType":"semver","status":"unaffected"},{"version":"6.6.3","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.7","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]

CVE Modified by kernel.org 1/05/2026 6:15:55 AM

Action	Type	Old Value
Removed	Reference	https://git.kernel.org/stable/c/1571120c44dbe5757aee1612c5b6097cdc42710f
Removed	Reference	https://git.kernel.org/stable/c/298e767362cade639b7121ecb3cc5345b6529f62
Removed	Reference	https://git.kernel.org/stable/c/efeae5f4972f75d50002bc50eb112ab9e7069b18
Removed	Reference Type	https://git.kernel.org/stable/c/1571120c44dbe5757aee1612c5b6097cdc42710f Types: Patch
Removed	Reference Type	https://git.kernel.org/stable/c/298e767362cade639b7121ecb3cc5345b6529f62 Types: Patch
Removed	Reference Type	https://git.kernel.org/stable/c/efeae5f4972f75d50002bc50eb112ab9e7069b18 Types: Patch

Initial Analysis by NIST 4/02/2025 10:59:29 AM

Action	Type	New Value
Added	CPE Configuration	OR cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 6.6 up to (excluding) 6.6.3 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 6.2 up to (excluding) 6.5.13 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.16 up to (excluding) 6.1.64 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.20 up to (excluding) 5.4.262 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.5 up to (excluding) 5.10.202 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 5.11 up to (excluding) 5.15.140 cpe:2.3:o:linux:linux_kernel::::::::* versions up to (excluding) 4.14.331 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.15 up to (excluding) 4.19.300
Added	Reference Type	CVE: https://git.kernel.org/stable/c/1571120c44dbe5757aee1612c5b6097cdc42710f Types: Patch
Added	Reference Type	CVE: https://git.kernel.org/stable/c/21a0f310a9f3bfd2b4cf4f382430e638607db846 Types: Patch
Added	Reference Type	CVE: https://git.kernel.org/stable/c/298e767362cade639b7121ecb3cc5345b6529f62 Types: Patch
Added	Reference Type	CVE: https://git.kernel.org/stable/c/2be24c47ac19bf639c48c082486c08888bd603c6 Types: Patch
Added	Reference Type	CVE: https://git.kernel.org/stable/c/5a94cffe90e20e8fade0b9abd4370bd671fe87c7 Types: Patch
Added	Reference Type	CVE: https://git.kernel.org/stable/c/717de20abdcd1d4993fa450e28b8086a352620ea Types: Patch
Added	Reference Type	CVE: https://git.kernel.org/stable/c/adc2474d823fe81d8da759207f4f1d3691aa775a Types: Patch
Added	Reference Type	CVE: https://git.kernel.org/stable/c/e160ab85166e77347d0cbe5149045cb25e83937f Types: Patch
Added	Reference Type	CVE: https://git.kernel.org/stable/c/efeae5f4972f75d50002bc50eb112ab9e7069b18 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/1571120c44dbe5757aee1612c5b6097cdc42710f Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/21a0f310a9f3bfd2b4cf4f382430e638607db846 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/298e767362cade639b7121ecb3cc5345b6529f62 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/2be24c47ac19bf639c48c082486c08888bd603c6 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/5a94cffe90e20e8fade0b9abd4370bd671fe87c7 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/717de20abdcd1d4993fa450e28b8086a352620ea Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/adc2474d823fe81d8da759207f4f1d3691aa775a Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/e160ab85166e77347d0cbe5149045cb25e83937f Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/efeae5f4972f75d50002bc50eb112ab9e7069b18 Types: Patch

CVE Modified by CVE 11/21/2024 3:40:40 AM

Action	Type	New Value
Added	Reference	https://git.kernel.org/stable/c/1571120c44dbe5757aee1612c5b6097cdc42710f
Added	Reference	https://git.kernel.org/stable/c/21a0f310a9f3bfd2b4cf4f382430e638607db846
Added	Reference	https://git.kernel.org/stable/c/298e767362cade639b7121ecb3cc5345b6529f62
Added	Reference	https://git.kernel.org/stable/c/2be24c47ac19bf639c48c082486c08888bd603c6
Added	Reference	https://git.kernel.org/stable/c/5a94cffe90e20e8fade0b9abd4370bd671fe87c7
Added	Reference	https://git.kernel.org/stable/c/717de20abdcd1d4993fa450e28b8086a352620ea
Added	Reference	https://git.kernel.org/stable/c/adc2474d823fe81d8da759207f4f1d3691aa775a
Added	Reference	https://git.kernel.org/stable/c/e160ab85166e77347d0cbe5149045cb25e83937f
Added	Reference	https://git.kernel.org/stable/c/efeae5f4972f75d50002bc50eb112ab9e7069b18

New CVE Received from kernel.org 5/21/2024 12:15:20 PM

Action	Type	New Value
Added	Description	In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() We can get a UBSAN warning if ieee80211_get_tx_power() returns the INT_MIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in net/wireless/nl80211.c:3816:5 -2147483648 * 100 cannot be represented in type 'int' CPU: 0 PID: 20433 Comm: insmod Tainted: G WC OE Call Trace: dump_stack+0x74/0x92 ubsan_epilogue+0x9/0x50 handle_overflow+0x8d/0xd0 __ubsan_handle_mul_overflow+0xe/0x10 nl80211_send_iface+0x688/0x6b0 [cfg80211] [...] cfg80211_register_wdev+0x78/0xb0 [cfg80211] cfg80211_netdev_notifier_call+0x200/0x620 [cfg80211] [...] ieee80211_if_add+0x60e/0x8f0 [mac80211] ieee80211_register_hw+0xda5/0x1170 [mac80211] In this case, simply return an error instead, to indicate that no data is available.
Added	Reference	kernel.org https://git.kernel.org/stable/c/1571120c44dbe5757aee1612c5b6097cdc42710f [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/21a0f310a9f3bfd2b4cf4f382430e638607db846 [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/298e767362cade639b7121ecb3cc5345b6529f62 [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/2be24c47ac19bf639c48c082486c08888bd603c6 [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/5a94cffe90e20e8fade0b9abd4370bd671fe87c7 [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/717de20abdcd1d4993fa450e28b8086a352620ea [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/adc2474d823fe81d8da759207f4f1d3691aa775a [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/e160ab85166e77347d0cbe5149045cb25e83937f [No types assigned]
Added	Reference	kernel.org https://git.kernel.org/stable/c/efeae5f4972f75d50002bc50eb112ab9e7069b18 [No types assigned]

Quick Info

CVE Dictionary Entry:
CVE-2023-52832
NVD Published Date:
05/21/2024
NVD Last Modified:
06/17/2026
Source:
kernel.org

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2023-52832 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by CISA-ADP 6/17/2026 2:43:41 AM

CVE Modified by kernel.org 6/17/2026 2:43:41 AM

CVE Modified by kernel.org 1/05/2026 6:15:55 AM

Initial Analysis by NIST 4/02/2025 10:59:29 AM

CVE Modified by CVE 11/21/2024 3:40:40 AM

CVE Modified by CISA-ADP 7/02/2024 9:44:03 PM

CVE Modified by kernel.org 5/29/2024 2:16:21 AM

New CVE Received from kernel.org 5/21/2024 12:15:20 PM

Quick Info