Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checking.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
dd43f8f90206054e7da7593de0a334fb2cd0ea88 to < 8e751d46336205abc259ed3990e850a9843fb649affectedc38c701851011c94ce3be1ccb3593678d2933fd8 to < e472f59d02c82b511bc43a3f96d62ed08bf4537faffectedc38c701851011c94ce3be1ccb3593678d2933fd8 to < 31229145e6ba5ace3e9391113376fa05b7831edeaffectedc38c701851011c94ce3be1ccb3593678d2933fd8 to < 5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523affectedc38c701851011c94ce3be1ccb3593678d2933fd8 to < 62b635dcd69c4fde7ce1de4992d71420a37e51e3affectedbf3c348c5fdcf00a7eeed04a1b83e454d2dca2e5affected6.1.16 to < 6.1.151affected6.2.3 to < 6.3affected
Linux Linux
Default version status: affected
6.3affected0 to < 6.3unaffected6.1.151 to ≤ 6.1.*unaffected6.6.105 to ≤ 6.6.*unaffected6.12.46 to ≤ 6.12.*unaffected6.16.6 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/8e751d46336205abc259ed3990e850a9843fb649 ↗
- https://git.kernel.org/stable/c/e472f59d02c82b511bc43a3f96d62ed08bf4537f ↗
- https://git.kernel.org/stable/c/31229145e6ba5ace3e9391113376fa05b7831ede ↗
- https://git.kernel.org/stable/c/5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523 ↗
- https://git.kernel.org/stable/c/62b635dcd69c4fde7ce1de4992d71420a37e51e3 ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html ↗