wifi: mt76: mt7921: validate CLC firmware records
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware buffer, make the record loop fail to advance, or index phy->clc past its end. Validate the table and record bounds before dereferencing or copying.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 · fixed in 46673662402884ca55a869e4ebe956e08e8b6b05; From 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 · fixed in 740272d46ffc8231709a5e774cf5e4a5785b8a02; From 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 · fixed in 602a950134ee2940136f60797e4457c3983b06ce; From 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 · fixed in 3896be051e928c891922d91de94c99519d215dff; From 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 · fixed in 3c505e2af16a9320f4355218394a955fbbc65322; From 23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 · fixed in 9417c5818a0146980c2608fda94c908e604eb033
- Linux Linux
6.1
- KernelLinux
From 6.1.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.7