In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: pcie: fix possible NULL pointer dereference

It is possible that iwl_pci_probe() will fail and free the trans,
then afterwards iwl_pci_remove() will be called and crash by trying
to access trans which is already freed, fix it.

iwlwifi 0000:01:00.0: Detected crf-id 0xa5a5a5a2, cnv-id 0xa5a5a5a2
wfpm id 0xa5a5a5a2
iwlwifi 0000:01:00.0: Can't find a correct rfid for crf id 0x5a2
...
BUG: kernel NULL pointer dereference, address: 0000000000000028
...
RIP: 0010:iwl_pci_remove+0x12/0x30 [iwlwifi]
pci_device_remove+0x3e/0xb0
device_release_driver_internal+0x103/0x1f0
driver_detach+0x4c/0x90
bus_remove_driver+0x5c/0xd0
driver_unregister+0x31/0x50
pci_unregister_driver+0x40/0x90
iwl_pci_unregister_driver+0x15/0x20 [iwlwifi]
__exit_compat+0x9/0x98 [iwlwifi]
__x64_sys_delete_module+0x147/0x260

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00035.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
809805a820c6445f7a701ded24fdc6bbc841d1e4 affected < f6f2d16c77f936041b8ac495fceabded4ec6c83c
809805a820c6445f7a701ded24fdc6bbc841d1e4 affected < 0fc0d287c1e7dcb39a3b9bb0f8679cd68c2156c7
809805a820c6445f7a701ded24fdc6bbc841d1e4 affected < 7545f21eee1356ec98581125c4dba9c4c0cc7397
809805a820c6445f7a701ded24fdc6bbc841d1e4 affected < 0f9a1bcb94016d3a3c455a77b01f6bb06e15f6eb
809805a820c6445f7a701ded24fdc6bbc841d1e4 affected < dcd23aa6cc0ded7950b60ce1badb80b84045c6c0
809805a820c6445f7a701ded24fdc6bbc841d1e4 affected < b655b9a9f8467684cfa8906713d33b71ea8c8f54
Linux Linux affected
Version Status Constraints
5.4 affected —
0 unaffected < 5.4
5.4.244 unaffected ≤ 5.4.*
5.10.181 unaffected ≤ 5.10.*
5.15.113 unaffected ≤ 5.15.*
6.1.30 unaffected ≤ 6.1.*
6.3.4 unaffected ≤ 6.3.*
6.4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0f9a1bcb94016d3a3c455a77b01f6bb06e15f6eb cve-icon cve-icon
https://git.kernel.org/stable/c/0fc0d287c1e7dcb39a3b9bb0f8679cd68c2156c7 cve-icon cve-icon
https://git.kernel.org/stable/c/7545f21eee1356ec98581125c4dba9c4c0cc7397 cve-icon cve-icon
https://git.kernel.org/stable/c/b655b9a9f8467684cfa8906713d33b71ea8c8f54 cve-icon cve-icon
https://git.kernel.org/stable/c/dcd23aa6cc0ded7950b60ce1badb80b84045c6c0 cve-icon cve-icon
https://git.kernel.org/stable/c/f6f2d16c77f936041b8ac495fceabded4ec6c83c cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025122425-CVE-2023-54053-9a4e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54053 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54053 cve-icon
History

Thu, 25 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Wed, 24 Dec 2025 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possible that iwl_pci_probe() will fail and free the trans, then afterwards iwl_pci_remove() will be called and crash by trying to access trans which is already freed, fix it. iwlwifi 0000:01:00.0: Detected crf-id 0xa5a5a5a2, cnv-id 0xa5a5a5a2 wfpm id 0xa5a5a5a2 iwlwifi 0000:01:00.0: Can't find a correct rfid for crf id 0x5a2 ... BUG: kernel NULL pointer dereference, address: 0000000000000028 ... RIP: 0010:iwl_pci_remove+0x12/0x30 [iwlwifi] pci_device_remove+0x3e/0xb0 device_release_driver_internal+0x103/0x1f0 driver_detach+0x4c/0x90 bus_remove_driver+0x5c/0xd0 driver_unregister+0x31/0x50 pci_unregister_driver+0x40/0x90 iwl_pci_unregister_driver+0x15/0x20 [iwlwifi] __exit_compat+0x9/0x98 [iwlwifi] __x64_sys_delete_module+0x147/0x260
Title wifi: iwlwifi: pcie: fix possible NULL pointer dereference
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-05T10:33:35.583Z

Reserved: 2025-12-24T12:21:05.090Z

Link: CVE-2023-54053

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-24T13:16:06.980

Modified: 2025-12-29T15:58:34.503

Link: CVE-2023-54053

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-12-24T00:00:00Z

Links: CVE-2023-54053 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.