wifi: iwlwifi: mvm: fix an off-by-1 boundary check
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th byte, check the length is big enough.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 · fixed in 2c8c06c59ed72a42e4d32e222542b582b4911459; From 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 · fixed in 23d3fddddd2bcedb4fd6cec5bef16b1fbb563019; From 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 · fixed in 45fcdbae679861b90f08964a0c3e9eead3bacd6f; From 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 · fixed in 7a2d4efea2c41b49db90907c8b6f37f8b63a9f50; From 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 · fixed in 1e3b72c9b63288a5f204e2c8f38eae01515d7dc5; From 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 · fixed in 4d60332387336088e66cc8f1e71e516b6b872ef9; From 4f58121dc40a1d5dd2f630a5ec4dac5afa1ce3f4 · fixed in d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8
- Linux Linux
5.4
- KernelLinux
From 5.4.0 · fixed in 5.10.271; From 5.11.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53
References 7
git.kernel.org
- stable/c/2c8c06c59ed72a42e4d32e222542b582b4911459
- stable/c/23d3fddddd2bcedb4fd6cec5bef16b1fbb563019
- stable/c/45fcdbae679861b90f08964a0c3e9eead3bacd6f
- stable/c/7a2d4efea2c41b49db90907c8b6f37f8b63a9f50
- stable/c/1e3b72c9b63288a5f204e2c8f38eae01515d7dc5
- stable/c/4d60332387336088e66cc8f1e71e516b6b872ef9
- stable/c/d77aff138c9ec6c8562f4c2c9f262d3d9c4b4cb8