In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware (e.g. BCM4387). It seems there was a simple way of passing it in binary all along, so use that and avoid the hexification. OpenBSD has been doing it like this from the beginning, so this should work on all chips. Also clear the structure before setting the PMK. This was leaking uninitialized stack contents to the device.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/1687845eb8f37360a9ee849a3587ab659b090773 cve-icon cve-icon
https://git.kernel.org/stable/c/2bc34facb90ceeff6f8c17d2006575a6d07c3825 cve-icon cve-icon
https://git.kernel.org/stable/c/2fa3a5226b05e0a797c68b9609dcebe0cd236b27 cve-icon cve-icon
https://git.kernel.org/stable/c/4e8dc0e5c7636efaadbd7e488acd34b4291c0431 cve-icon cve-icon
https://git.kernel.org/stable/c/56c7e9c39bd54fd753c0c4b1ed10278cbd3a5f02 cve-icon cve-icon
https://git.kernel.org/stable/c/89b89e52153fda2733562776c7c9d9d3ebf8dd6d cve-icon cve-icon
https://git.kernel.org/stable/c/e242c66f7ecfe8f5b6eb308f4ea464fd8589c866 cve-icon cve-icon
https://git.kernel.org/stable/c/f8a6c53ff1d91acd5a20eb627edbffd816eb9a4e cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025102213-CVE-2023-53715-fd47@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53715 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53715 cve-icon
History

Thu, 23 Oct 2025 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 23 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Wed, 22 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware (e.g. BCM4387). It seems there was a simple way of passing it in binary all along, so use that and avoid the hexification. OpenBSD has been doing it like this from the beginning, so this should work on all chips. Also clear the structure before setting the PMK. This was leaking uninitialized stack contents to the device.
Title wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-10-22T13:23:48.905Z

Updated: 2025-10-22T13:23:48.905Z

Reserved: 2025-10-22T13:21:37.347Z

Link: CVE-2023-53715

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-22T14:15:46.140

Modified: 2025-10-22T21:12:48.953

Link: CVE-2023-53715

cve-icon Redhat

Severity : Important

Publid Date: 2025-10-22T00:00:00Z

Links: CVE-2023-53715 - Bugzilla