Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more careful and check if the subframe header can even be present.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
966d5c2c22edcc0ab3d519af39f91a29329c979a to < 9eb3bc0973d084423a6df21cf2c74692ff05647eaffected6e4c0d0460bd32ca9244dff3ba2d2da27235de11 to < 5d7a8585fbb31e88fb2a0f581b70667d3300d1e9affected6e4c0d0460bd32ca9244dff3ba2d2da27235de11 to < 16da1e1dac23be45ef6e23c41b1508c400e6c544affected6e4c0d0460bd32ca9244dff3ba2d2da27235de11 to < 9ad7974856926129f190ffbe3beea78460b3b7ccaffected
Linux Linux
Default version status: affected
6.3affected0 to < 6.3unaffected6.6.27 to ≤ 6.6.*unaffected6.8.6 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9eb3bc0973d084423a6df21cf2c74692ff05647e ↗
- https://git.kernel.org/stable/c/5d7a8585fbb31e88fb2a0f581b70667d3300d1e9 ↗
- https://git.kernel.org/stable/c/16da1e1dac23be45ef6e23c41b1508c400e6c544 ↗
- https://git.kernel.org/stable/c/9ad7974856926129f190ffbe3beea78460b3b7cc ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗