SB2025100196 - Incorrect calculation in Linux kernel iwlwifi pcie driver
Published: October 1, 2025 Updated: October 27, 2025
Security Bulletin ID
SB2025100196
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Incorrect calculation (CVE-ID: CVE-2023-53524)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect calculation within the iwl_write_to_user_buf() function in drivers/net/wireless/intel/iwlwifi/pcie/trans.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/059e426d666a41e26b184c177c1ca3ee2d6fa1b6
- https://git.kernel.org/stable/c/0ad8dd870aa187d0c21d032bb2c6433559075eec
- https://git.kernel.org/stable/c/58d1b717879bfeabe09b35e41ad667c79933eb2e
- https://git.kernel.org/stable/c/82f877ec9b041edc4c7c509c605cc3393d837bf0
- https://git.kernel.org/stable/c/de78456976026102babe66258c228691ca5677c0
- https://git.kernel.org/stable/c/eb1ef44efac797b384d361a76e33f77027c29a14
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.30