Description
In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid max_flowrings from dongle When firmware hit trap at initialization, host will read abnormal max_flowrings number from dongle, and it will cause kernel panic when doing iowrite to initialize dongle ring. To detect this error at early stage, we directly return error when getting invalid max_flowrings(>256).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9e37f045d5e7f33450515f237c2f6f6bfee137dd to < 3cc9299036bdb647408e11e41de3eb1ff6d428cdaffected9e37f045d5e7f33450515f237c2f6f6bfee137dd to < 2e8bb402b060a6c22160de3d72cee057698177c8affected9e37f045d5e7f33450515f237c2f6f6bfee137dd to < 10c4b63d09a5b0ebf1b61af1dae7f25555cf58b6affected9e37f045d5e7f33450515f237c2f6f6bfee137dd to < 87f126b25fa8562196f0f4c0aa46a446026199bfaffected9e37f045d5e7f33450515f237c2f6f6bfee137dd to < 200347eb3b2608cc8b54c13dd1d5e03809ba2eb2affected9e37f045d5e7f33450515f237c2f6f6bfee137dd to < 2aca4f3734bd717e04943ddf340d49ab62299a00affected
Linux Linux
Default version status: affected
3.17affected0 to < 3.17unaffected5.4.229 to ≤ 5.4.*unaffected5.10.163 to ≤ 5.10.*unaffected5.15.86 to ≤ 5.15.*unaffected6.0.16 to ≤ 6.0.*unaffected6.1.2 to ≤ 6.1.*unaffected6.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3cc9299036bdb647408e11e41de3eb1ff6d428cd ↗
- https://git.kernel.org/stable/c/2e8bb402b060a6c22160de3d72cee057698177c8 ↗
- https://git.kernel.org/stable/c/10c4b63d09a5b0ebf1b61af1dae7f25555cf58b6 ↗
- https://git.kernel.org/stable/c/87f126b25fa8562196f0f4c0aa46a446026199bf ↗
- https://git.kernel.org/stable/c/200347eb3b2608cc8b54c13dd1d5e03809ba2eb2 ↗
- https://git.kernel.org/stable/c/2aca4f3734bd717e04943ddf340d49ab62299a00 ↗