wifi: iwlwifi: mei: check SAP message length before reading it
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.188, 6.1, 6.6.157, 6.12.110, 6.18.52, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From a29e442ee110aafdf7785fac6de44b22d3da43db · fixed in a4034f1cc8a422cefc519290d8e6cfb7ff773586; From bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e · fixed in b90ebae632318dc2e5cd4ac96e454ec50f705579; From bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e · fixed in 9c6bea89a16815688a5240dd4a74c922a92fcdc3; From bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e · fixed in 242125bbf19a2974d22f3d5025c9c14c0a4aea58; From bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e · fixed in f7f770d12e6e928006f89a59291074e5fea82886; From bcd68b3dbe78b7b0f7b6b55162cf1eff1e7fff9e · fixed in 7d8cc301bcba233f31b589a45f4c1c97f2bb90d6; From 6.1.2 · fixed in 6.1.188; From 6.0.16 · fixed in 6.1
- Linux Linux
6.2
- KernelLinux
fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; fixed in 6.12.110; From 6.7.0 · fixed in 6.18.52; From 6.13.0 · fixed in 7.2.6