LiveActive security incident?Get immediate response
CVE Record

CVE-2023-53203: wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val In order to fix a possible NULL pointer dereference in mt7996_mac_write_txwi() of vif pointer, export mt76_connac2_mac_tx_rate_val utility routine and reuse it in mt7996 driver.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

CVE-2023-53203 is a Linux kernel Wi-Fi driver issue that can cause a NULL pointer dereference in the mt7996 driver. The public record does not provide CVSS, impact scope, or exploit details. Business urgency depends on whether your Linux systems use the affected MediaTek mt7996 Wi-Fi path.

Executive priority

Treat as a targeted kernel maintenance item, not an emergency, unless affected Wi-Fi hardware is widely deployed in business-critical systems. The absence of CVSS and exploitation evidence lowers confidence, so prioritize asset identification and normal patch intake.

Technical view

The fix changes mt7996_mac_write_txwi() to rely on mt76_connac2_mac_tx_rate_val, addressing a possible NULL pointer dereference involving the vif pointer. Sources identify Linux kernel 6.2-related affected versions and reference two stable kernel commits. No CWE, CVSS vector, or detailed trigger conditions are provided.

Likely exposure

Exposure appears limited to Linux systems running affected kernels with the mt76 mt7996 Wi-Fi driver path. Servers without this driver or hardware are less likely to be exposed. Distro kernels may contain backports, so package version alone may not prove vulnerability.

Exploitation context

The source bundle does not report active exploitation, public exploit availability, or KEV listing. It describes a possible NULL pointer dereference, but does not identify whether exploitation requires local access, network proximity, specific Wi-Fi traffic, or driver state.

Researcher notes

The record is sparse. Key unknowns are trigger path, attacker positioning, crash impact, and exact affected version ranges across distributions. Analysis should focus on the mt7996_mac_write_txwi() call path and whether local kernel builds already include the stable commit changes.

Mitigation direction

  • Upgrade to a kernel build containing the referenced stable fixes.
  • Track Linux distribution advisories for backported CVE-2023-53203 fixes.
  • Prioritize devices using MediaTek mt7996 Wi-Fi hardware or mt76 drivers.
  • If patch timing is unclear, follow vendor guidance for interim risk reduction.

Validation and detection

  • Inventory Linux kernels and identify systems loading the mt7996 or mt76 driver.
  • Check whether deployed kernel source or changelog includes the referenced stable commits.
  • Confirm distribution security advisories map your kernel package to this CVE.
  • Review kernel logs for mt7996 driver crashes or NULL pointer dereference symptoms.
Prepared
Confidence
medium
Sources
4

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2023-53203 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
0ADP providers
3Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux98686cd21624c75a043e96812beadddf4f6f48e5, 98686cd21624c75a043e96812beadddf4f6f48e5unaffected
LinuxLinux6.2, 0, 6.2.3, 6.3affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.