{
  "cveId": "CVE-2023-53315",
  "url": "https://patchblox.com/security/cve/CVE-2023-53315",
  "summary": "CVE-2023-53315 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53315, released September 16, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath11k: Fix SKB corruption in REO destinat...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  wifi: ath11k: Fix SKB corruption in REO destination ring  While running traffics for a long time, randomly an RX descriptor filled with value \u00220\u0022 from REO destination ring is received. This descriptor which is invalid causes the wrong SKB (SKB stored in the IDR lookup with buffer id \u00220\u0022) to be fetched which in turn causes SKB memory corruption issue and the same leads to crash after some time.  Changed the start id for idr allocation to \u00221\u0022 and the buffer id \u00220\u0022 is reserved for error validation. Introduced Sanity check to validate the descriptor, before processing the SKB.  Crash Signature :  Unable to handle kernel paging request at virtual address 3f004900 PC points to \u0022b15_dma_inv_range\u002B0x30/0x50\u0022 LR points to \u0022dma_cache_maint_page\u002B0x8c/0x128\u0022. The Backtrace obtained is as follows: [\u003C8031716c\u003E] (b15_dma_inv_range) from [\u003C80313a4c\u003E] (dma_cache_maint_page\u002B0x8c/0x128) [\u003C80313a4c\u003E] (dma_cache_maint_page) from [\u003C80313b90\u003E] (__dma_page_dev_to_cpu\u002B0x28/0xcc) [\u003C80313b90\u003E] (__dma_page_dev_to_cpu) from [\u003C7fb5dd68\u003E] (ath11k_dp_process_rx\u002B0x1e8/0x4a4 [ath11k]) [\u003C7fb5dd68\u003E] (ath11k_dp_process_rx [ath11k]) from [\u003C7fb53c20\u003E] (ath11k_dp_service_srng\u002B0xb0/0x2ac [ath11k]) [\u003C7fb53c20\u003E] (ath11k_dp_service_srng [ath11k]) from [\u003C7f67bba4\u003E] (ath11k_pci_ext_grp_napi_poll\u002B0x1c/0x78 [ath11k_pci]) [\u003C7f67bba4\u003E] (ath11k_pci_ext_grp_napi_poll [ath11k_pci]) from [\u003C807d5cf4\u003E] (__napi_poll\u002B0x28/0xb8) [\u003C807d5cf4\u003E] (__napi_poll) from [\u003C807d5f28\u003E] (net_rx_action\u002B0xf0/0x280) [\u003C807d5f28\u003E] (net_rx_action) from [\u003C80302148\u003E] (__do_softirq\u002B0xd0/0x280) [\u003C80302148\u003E] (__do_softirq) from [\u003C80320408\u003E] (irq_exit\u002B0x74/0xd4) [\u003C80320408\u003E] (irq_exit) from [\u003C803638a4\u003E] (__handle_domain_irq\u002B0x90/0xb4) [\u003C803638a4\u003E] (__handle_domain_irq) from [\u003C805bedec\u003E] (gic_handle_irq\u002B0x58/0x90) [\u003C805bedec\u003E] (gic_handle_irq) from [\u003C80301a78\u003E] (__irq_svc\u002B0x58/0x8c)  Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1",
  "published": "2025-09-16T17:15:37Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00236,
  "epssPercentile": 0.14726,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.37-1",
      "fix": "DEBIAN-CVE-2023-53315",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53315",
      "released": "2025-09-16T17:15:37Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-53315",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53315",
      "released": "2025-09-16T17:15:37Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-53315",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53315",
      "released": "2025-09-16T17:15:37Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}