Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix buffer overflow in elem comparison For vendor elements, the code here assumes that 5 octets are present without checking. Since the element itself is already checked to fit, we only need to check the length.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0b8fb8235be8be99a197e8d948fc0a2df8dc261a to < f5c2ec288a865dbe3706b09bed12302e9f6d696baffected0b8fb8235be8be99a197e8d948fc0a2df8dc261a to < 9e6b79a3cd17620d467311b30d56f2648f6880aaaffected0b8fb8235be8be99a197e8d948fc0a2df8dc261a to < 88a6fe3707888bd1893e9741157a7035c4159ab6affected0b8fb8235be8be99a197e8d948fc0a2df8dc261a to < 391cb872553627bdcf236c03ee7d5adb275e37e1affected0b8fb8235be8be99a197e8d948fc0a2df8dc261a to < 9f16b5c82a025cd4c864737409234ddc44fb166aaffected
Linux Linux
Default version status: affected
5.1affected0 to < 5.1unaffected5.4.226 to ≤ 5.4.*unaffected5.10.158 to ≤ 5.10.*unaffected5.15.82 to ≤ 5.15.*unaffected6.0.12 to ≤ 6.0.*unaffected6.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f5c2ec288a865dbe3706b09bed12302e9f6d696b ↗
- https://git.kernel.org/stable/c/9e6b79a3cd17620d467311b30d56f2648f6880aa ↗
- https://git.kernel.org/stable/c/88a6fe3707888bd1893e9741157a7035c4159ab6 ↗
- https://git.kernel.org/stable/c/391cb872553627bdcf236c03ee7d5adb275e37e1 ↗
- https://git.kernel.org/stable/c/9f16b5c82a025cd4c864737409234ddc44fb166a ↗