Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() If ab->fw.m3_data points to data, then fw pointer remains null. Further, if m3_mem is not allocated, then fw is dereferenced to be passed to ath11k_err function. Replace fw->size by m3_len. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
98e373dc08187c3f1cd97342b369fa2b0f24005e to < 7554d498e4283c3b4559795abd175eb24a84f47faffected7db88b962f06a52af5e9a32971012e8f3427cec0 to < 1f52119809b76d43759fc47da1cf708690b740a1affected7db88b962f06a52af5e9a32971012e8f3427cec0 to < 888830b2cbc035838bebefe94502976da94332a5affected7db88b962f06a52af5e9a32971012e8f3427cec0 to < 500fcc31e488d798937a23dbb1f62db46820c5b2affected7db88b962f06a52af5e9a32971012e8f3427cec0 to < 3fd2ef2ae2b5c955584a3bee8e83ae7d7a98f782affected
Linux Linux
Default version status: affected
6.7affected0 to < 6.7unaffected6.12.51 to ≤ 6.12.*unaffected6.16.11 to ≤ 6.16.*unaffected6.17.1 to ≤ 6.17.*unaffected6.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7554d498e4283c3b4559795abd175eb24a84f47f ↗
- https://git.kernel.org/stable/c/1f52119809b76d43759fc47da1cf708690b740a1 ↗
- https://git.kernel.org/stable/c/888830b2cbc035838bebefe94502976da94332a5 ↗
- https://git.kernel.org/stable/c/500fcc31e488d798937a23dbb1f62db46820c5b2 ↗
- https://git.kernel.org/stable/c/3fd2ef2ae2b5c955584a3bee8e83ae7d7a98f782 ↗