Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-53715 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware (e.g. BCM4387). It seems there was a simple way of passing it in binary all along, so use that and avoid the hexification. OpenBSD has been doing it like this from the beginning, so this should work on all chips. Also clear the structure before setting the PMK. This was leaking uninitialized stack contents to the device.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:4.3 MEDIUMVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/1687845eb8f37360a9ee849a3587ab659b090773 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/2bc34facb90ceeff6f8c17d2006575a6d07c3825 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/2fa3a5226b05e0a797c68b9609dcebe0cd236b27 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/4e8dc0e5c7636efaadbd7e488acd34b4291c0431 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/56c7e9c39bd54fd753c0c4b1ed10278cbd3a5f02 kernel.orgSource CodeVendor

see all 8 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

ProductVersions
Linux kernel
All versions

CPE

  • cpe:2.3:o:kernel:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:endpoint_security_linux_threat_prevention:*:*
  • cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • Upgrade: linux-1687845eb8f37360a9ee849a3587ab659b090773.tar.gzmoderate effort
  • Upgrade: linux-2bc34facb90ceeff6f8c17d2006575a6d07c3825.tar.gzmoderate effort
  • Upgrade: linux-2fa3a5226b05e0a797c68b9609dcebe0cd236b27.tar.gzmoderate effort
  • Upgrade: linux-4e8dc0e5c7636efaadbd7e488acd34b4291c0431.tar.gzmoderate effort
  • Upgrade: linux-56c7e9c39bd54fd753c0c4b1ed10278cbd3a5f02.tar.gzmoderate effort
  • Upgrade: linux-e242c66f7ecfe8f5b6eb308f4ea464fd8589c866.tar.gzmoderate effort
  • Upgrade: linux-f8a6c53ff1d91acd5a20eb627edbffd816eb9a4e.tar.gzmoderate effort
Broadcom brcmfmac
All versions

CPE

  • cpe:2.3:a:broadcom:brcmfmac_driver:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2023-53715
NVD Published Date:
Oct 22, 2025
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2023-53715 Details - Not Deferred