CVE-2023-7042
Aliases:UBUNTU-CVE-2023-7042DEBIAN-CVE-2023-7042CGA-22h2-vv95-76xhCGA-28r8-g8xp-w9mqCGA-2w2g-fhrh-c4xvCGA-3229-86mv-rjqpCGA-3863-w9gh-ghh9CGA-3h92-wfmh-cqjrCGA-3hhp-2m86-pg3mCGA-3x6f-5pxc-7rrxCGA-44v6-4h5x-x8x7CGA-4543-mxr8-v7rfCGA-45hq-x528-w6gqCGA-4mrw-jpjf-c4jjCGA-4rgj-rmxc-9fx4CGA-53f9-3282-rgfxCGA-5cw3-qv8h-w5f5CGA-5f25-94pc-mfrwCGA-5mpv-fp62-9p8rCGA-62qj-vgq9-9r8jCGA-672g-2m32-vrx2CGA-6946-p6jx-fxv2CGA-6978-fj6f-q8p2CGA-6cjg-2f7p-265jCGA-6h5c-4mc7-4hfrCGA-6ww5-j97m-j67cCGA-724g-x46v-7x8xCGA-74gj-3qxp-9464CGA-7h42-83qq-52fcCGA-7r2q-95f6-w3mrCGA-84c5-fh8x-8mr5CGA-8w7w-8hw6-2v2hCGA-8xgg-7296-6gv7CGA-94cm-x38v-vjcrCGA-c45g-5x94-494xCGA-cg7g-mr3f-vp7pCGA-fc58-hj4c-fxh6CGA-fccq-352m-5qwfCGA-ffch-3x9j-fpx2CGA-fx22-gq4m-f6ccCGA-g2mc-cqr4-f358CGA-gfq4-h7c8-3cxhCGA-ghc8-hq5w-c8r8CGA-ghv8-vff8-78mqCGA-gqhq-c4p4-gqmjCGA-hq4h-jq6f-93fjCGA-hw6c-9fp2-54fgCGA-jfgw-p3mx-fxq6CGA-jhmh-hmvv-rq46CGA-jw7m-rx52-6gwgCGA-m26q-cf8f-v39gCGA-m73p-cj2m-8wg8CGA-mpwp-qrhv-wm4pCGA-mrv9-qprj-fjw3CGA-mw9w-wh5h-34vpCGA-mwv6-3wmr-r7pwCGA-pcq3-388p-77prCGA-prr7-j5rv-5mphCGA-q4xr-4pxx-pjjvCGA-q966-56cc-j9hqCGA-q9v3-x4wh-qvqvCGA-qcw7-jr57-g5jxCGA-qh66-8652-h3pqCGA-qjw4-q4c3-6355CGA-qp4f-7cx9-2335CGA-r726-58m3-8g87CGA-rfhr-cj2h-7h79CGA-rhfq-4j4p-cgv6CGA-rpm8-vfjc-r992CGA-v7r3-3v4g-rgc7CGA-v98j-g7m6-r498CGA-v9qf-8v8g-f8j5CGA-vj94-2pc4-3cqhCGA-w88m-h95m-mpj5CGA-wvgf-5rjv-ppghCGA-xgv3-jfqw-r246CGA-xhhr-gw6c-5hhgCGA-xj8q-mxh9-9xvhCGA-xxw7-hfqj-cj64
Advisory lineage Upstream: 0 Downstream: 44
Modified
Published: 21 Dec 2023, 20:02
Last modified:21 Nov 2025, 06:23
Vulnerability Summary
Overall Risk (default)
low
22/100 CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.28% LOW
0% probability +0.26%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
21 Dec 2023, 20:02
Published
Vulnerability first disclosed
21 Nov 2025, 06:23
Last Modified
Vulnerability information updated
Description
A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel. This issue could be exploited to trigger a denial of service.
CVSS Metrics
- v3.1•MEDIUM•Score: 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 0.28%• Percentile: 21%
Techniques & Countermeasures
- CWE-476•NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Systems
- chainguard•hyperv-daemons-generic
< 6.16.6-r0
- chainguard•linux-aws-6.12
< 0
- chainguard•linux-aws-6.18
< 6.18.0-r0
- chainguard•linux-aws-generic
< 6.16.6-r0
- chainguard•linux-aws-generic-boot-installed
< 6.16.6-r0
- chainguard•linux-aws-generic-fips-boot-installed
< 6.16.6-r0
- chainguard•linux-aws-generic-headers
< 6.16.6-r0
- chainguard•linux-aws-generic-modules
< 6.16.6-r0
- chainguard•linux-azure-6.18
< 6.18.2-r0 | < 6.18.7-r0
- chainguard•linux-azure-generic
< 6.18.7-r0 | < 6.16.6-r0
- chainguard•linux-azure-generic-boot-installed
< 6.16.6-r0
- chainguard•linux-azure-generic-fips-boot-installed
< 6.16.6-r0
- chainguard•linux-azure-generic-headers
< 6.16.6-r0
- chainguard•linux-azure-generic-modules
< 6.16.6-r0
- chainguard•linux-gcp-6.18
< 6.18.2-r0
- chainguard•linux-gcp-generic
< 6.16.6-r0 | < 6.18.7-r0
- chainguard•linux-gcp-generic-boot-installed
< 6.16.6-r0
- chainguard•linux-gcp-generic-fips-boot-installed
< 6.16.6-r0
- chainguard•linux-gcp-generic-headers
< 6.16.6-r0
- chainguard•linux-gcp-generic-modules
< 6.16.6-r0
- chainguard•linux-qemu-6.12
< 6.12.67-r0
- chainguard•linux-qemu-6.18
< 6.18.7-r0
- chainguard•linux-qemu-generic
< 6.18.7-r0 | < 6.16.6-r0
- chainguard•linux-qemu-generic-boot-installed
< 6.16.6-r0
- chainguard•linux-qemu-generic-bootc-boot-installed
< 6.18.7-r0 | < 6.16.6-r0
- chainguard•linux-qemu-generic-fips-boot-installed
< 6.16.6-r0
- chainguard•linux-qemu-generic-headers
< 6.16.6-r0
- chainguard•linux-qemu-generic-modules
< 6.16.6-r0
- chainguard•linux-qemu-rc
< 6.17_rc5-r0
- chainguard•linux-qemu-rc-boot-installed
< 6.17_rc5-r0
- chainguard•linux-qemu-rc-fips-boot-installed
< 6.17_rc5-r0
- chainguard•linux-qemu-rc-headers
< 6.17_rc5-r0
- chainguard•linux-qemu-rc-modules
< 6.17_rc5-r0
- chainguard•linux-vmware-6.18
< 6.18.7-r0
- chainguard•linux-vmware-generic
< 6.16.6-r0
- chainguard•linux-vmware-generic-boot-installed
< 6.16.6-r0
- chainguard•linux-vmware-generic-fips-boot-installed
< 6.16.6-r0
- chainguard•linux-vmware-generic-headers
< 6.16.6-r0
- chainguard•linux-vmware-generic-modules
< 6.16.6-r0
- debian•linux
< 5.10.216-1 | < 6.1.82-1 | < 6.7.12-1 | < 6.7.12-1
- ubuntu•linux
< 5.4.0-189.209 | < 5.15.0-112.122 | < 6.8.0-35.35
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
< 5.4.0-1128.138 | < 5.15.0-1063.69 | < 6.8.0-1009.9
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1063.69~20.04.1
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1128.138~18.04.1
Showing first 50 affected entries in server-rendered view.
References (33)
- https://access.redhat.com/security/cve/CVE-2023-7042
- https://bugzilla.redhat.com/show_bug.cgi?id=2255497
- https://patchwork.kernel.org/project/linux-wireless/patch/20231208043433.271449-1-hdthky0@gmail.com/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/54PLF5J33IRSLSR4UU6LQSMXX6FI5AOQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C25BK2YH5MZ6VNQXKF2NAJBTGXVEPKGC/
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://ubuntu.com/security/CVE-2023-7042
- https://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git/commit/?h=ath-next&id=ad25ee36f00172f7d53242dc77c69fff7ced0755
- https://lore.kernel.org/all/20231208043433.271449-1-hdthky0@gmail.com/
- https://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git/log/?h=ath-next
- https://www.cve.org/CVERecord?id=CVE-2023-7042
- https://ubuntu.com/security/notices/USN-6816-1
- https://ubuntu.com/security/notices/USN-6817-1
- https://ubuntu.com/security/notices/USN-6820-1
- https://ubuntu.com/security/notices/USN-6821-1
- https://ubuntu.com/security/notices/USN-6821-2
- https://ubuntu.com/security/notices/USN-6817-2
- https://ubuntu.com/security/notices/USN-6828-1
- https://ubuntu.com/security/notices/USN-6820-2
- https://ubuntu.com/security/notices/USN-6821-3
- https://ubuntu.com/security/notices/USN-6817-3
- https://ubuntu.com/security/notices/USN-6821-4
- https://ubuntu.com/security/notices/USN-6871-1
- https://ubuntu.com/security/notices/USN-6878-1
- https://ubuntu.com/security/notices/USN-6892-1
- https://ubuntu.com/security/notices/USN-6896-1
- https://ubuntu.com/security/notices/USN-6896-2
- https://ubuntu.com/security/notices/USN-6896-3
- https://ubuntu.com/security/notices/USN-6896-4
- https://ubuntu.com/security/notices/USN-6896-5
- https://ubuntu.com/security/notices/USN-6919-1
- https://security-tracker.debian.org/tracker/CVE-2023-7042