Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a notification that claims it has more data than it has, we will read past that was allocated for the notification. Remove the print of the buffer, we won't see it by default. If needed, we can see the content with tracing. This was reported by KFENCE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bdccdb854f2fb473f2ac4a6108df3cbfcedd5a87 to < 15b37c6fab9d5e40ac399fa1c725118588ed649caffectedbdccdb854f2fb473f2ac4a6108df3cbfcedd5a87 to < 6532f18e66b384b8d4b7e5c9caca042faaa9e8deaffectedbdccdb854f2fb473f2ac4a6108df3cbfcedd5a87 to < 46c59a25337049a2a230ce7f7c3b9f21d0aaaad7affectedbdccdb854f2fb473f2ac4a6108df3cbfcedd5a87 to < 65686118845d427df27ee83a6ddd4885596b0805affectedbdccdb854f2fb473f2ac4a6108df3cbfcedd5a87 to < a8bc8276af9aeacabb773f0c267cfcdb847c6f2daffectedbdccdb854f2fb473f2ac4a6108df3cbfcedd5a87 to < a05018739a5e6b9dc112c95bd4c59904062c8940affectedbdccdb854f2fb473f2ac4a6108df3cbfcedd5a87 to < acdfa33c3cf5e1cd185cc1e0486bd0ea9f09c154affectedbdccdb854f2fb473f2ac4a6108df3cbfcedd5a87 to < 4bb95f4535489ed830cf9b34b0a891e384d1aee4affected
Linux Linux
Default version status: affected
4.12affected0 to < 4.12unaffected4.19.317 to ≤ 4.19.*unaffected5.4.279 to ≤ 5.4.*unaffected5.10.221 to ≤ 5.10.*unaffected5.15.162 to ≤ 5.15.*unaffected6.1.95 to ≤ 6.1.*unaffected6.6.35 to ≤ 6.6.*unaffected6.9.6 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/15b37c6fab9d5e40ac399fa1c725118588ed649c ↗
- https://git.kernel.org/stable/c/6532f18e66b384b8d4b7e5c9caca042faaa9e8de ↗
- https://git.kernel.org/stable/c/46c59a25337049a2a230ce7f7c3b9f21d0aaaad7 ↗
- https://git.kernel.org/stable/c/65686118845d427df27ee83a6ddd4885596b0805 ↗
- https://git.kernel.org/stable/c/a8bc8276af9aeacabb773f0c267cfcdb847c6f2d ↗
- https://git.kernel.org/stable/c/a05018739a5e6b9dc112c95bd4c59904062c8940 ↗
- https://git.kernel.org/stable/c/acdfa33c3cf5e1cd185cc1e0486bd0ea9f09c154 ↗
- https://git.kernel.org/stable/c/4bb95f4535489ed830cf9b34b0a891e384d1aee4 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html ↗