Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() 1. The size of the response packet is not validated. 2. The response buffer is not freed. Resolve these issues by switching to iwl_mvm_send_cmd_status(), which handles both size validation and frees the buffer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f130bb75d8817c560b48c4d1a0e5279968a0859d to < 9c98ee7ea463a838235e7a0e35851b38476364f2affectedf130bb75d8817c560b48c4d1a0e5279968a0859d to < 45a628911d3c68e024eed337054a0452b064f450affectedf130bb75d8817c560b48c4d1a0e5279968a0859d to < 3f45d590ccbae6dfd6faef54efe74c30bd85d3daaffectedf130bb75d8817c560b48c4d1a0e5279968a0859d to < 64d63557ded6ff3ce72b18ab87a6c4b1b652161caffectedf130bb75d8817c560b48c4d1a0e5279968a0859d to < 3eb986c64c6bfb721950f9666a3b723cf65d043faffectedf130bb75d8817c560b48c4d1a0e5279968a0859d to < 9480c3045f302f43f9910d2d556d6cf5a62c1822affectedf130bb75d8817c560b48c4d1a0e5279968a0859d to < 07a6e3b78a65f4b2796a8d0d4adb1a15a81edeadaffected
Linux Linux
Default version status: affected
5.1affected0 to < 5.1unaffected5.4.285 to ≤ 5.4.*unaffected5.10.229 to ≤ 5.10.*unaffected5.15.171 to ≤ 5.15.*unaffected6.1.116 to ≤ 6.1.*unaffected6.6.60 to ≤ 6.6.*unaffected6.11.7 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9c98ee7ea463a838235e7a0e35851b38476364f2 ↗
- https://git.kernel.org/stable/c/45a628911d3c68e024eed337054a0452b064f450 ↗
- https://git.kernel.org/stable/c/3f45d590ccbae6dfd6faef54efe74c30bd85d3da ↗
- https://git.kernel.org/stable/c/64d63557ded6ff3ce72b18ab87a6c4b1b652161c ↗
- https://git.kernel.org/stable/c/3eb986c64c6bfb721950f9666a3b723cf65d043f ↗
- https://git.kernel.org/stable/c/9480c3045f302f43f9910d2d556d6cf5a62c1822 ↗
- https://git.kernel.org/stable/c/07a6e3b78a65f4b2796a8d0d4adb1a15a81edead ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html ↗