Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file There's no guarantee here that the file is always with a NUL-termination, so reading the string may read beyond the end of the TLV. If that's the last TLV in the file, it can perhaps even read beyond the end of the file buffer. Fix that by limiting the print format to the size of the buffer we have.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
aee1b6385e29e472ae5592b9652b750a29bf702e to < 38f0d398b6d7640d223db69df022c4a232f24774affectedaee1b6385e29e472ae5592b9652b750a29bf702e to < c0e626f2b2390472afac52dfe72b29daf9ed8e1daffectedaee1b6385e29e472ae5592b9652b750a29bf702e to < 47616b82f2d42ea2060334746fed9a2988d845c9affectedaee1b6385e29e472ae5592b9652b750a29bf702e to < 88ed69f924638c7503644e1f8eed1e976f3ffa7aaffectedaee1b6385e29e472ae5592b9652b750a29bf702e to < b02f8d5a71c8571ccf77f285737c566db73ef5e5affectedaee1b6385e29e472ae5592b9652b750a29bf702e to < f265e6031d0bc4fc40c4619cb42466722b46eaa9affectedaee1b6385e29e472ae5592b9652b750a29bf702e to < 59cdda202829d1d6a095d233386870a59aff986faffectedaee1b6385e29e472ae5592b9652b750a29bf702e to < e0dc2c1bef722cbf16ae557690861e5f91208129affected
Linux Linux
Default version status: affected
5.2affected0 to < 5.2unaffected5.4.291 to ≤ 5.4.*unaffected5.10.235 to ≤ 5.10.*unaffected5.15.179 to ≤ 5.15.*unaffected6.1.131 to ≤ 6.1.*unaffected6.6.83 to ≤ 6.6.*unaffected6.12.19 to ≤ 6.12.*unaffected6.13.7 to ≤ 6.13.*unaffected6.14 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/38f0d398b6d7640d223db69df022c4a232f24774 ↗
- https://git.kernel.org/stable/c/c0e626f2b2390472afac52dfe72b29daf9ed8e1d ↗
- https://git.kernel.org/stable/c/47616b82f2d42ea2060334746fed9a2988d845c9 ↗
- https://git.kernel.org/stable/c/88ed69f924638c7503644e1f8eed1e976f3ffa7a ↗
- https://git.kernel.org/stable/c/b02f8d5a71c8571ccf77f285737c566db73ef5e5 ↗
- https://git.kernel.org/stable/c/f265e6031d0bc4fc40c4619cb42466722b46eaa9 ↗
- https://git.kernel.org/stable/c/59cdda202829d1d6a095d233386870a59aff986f ↗
- https://git.kernel.org/stable/c/e0dc2c1bef722cbf16ae557690861e5f91208129 ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html ↗