Description
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie The current code checks 'i + 5 < in_len' at the end of the if statement. However, it accesses 'in_ie[i + 5]' before that check, which can lead to an out-of-bounds read. Move the length check to the beginning of the conditional to ensure the index is within bounds before accessing the array.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 6ff2243d5e05a5239e39d4ba61d96b0ea3bf7259affected554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 12cc6e8f8d4245b7b5a408c6fc8ab1d098d67020affected554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 209644e25757c499e1c1f08c071ea0386d4448b6affected554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 768f25613a9fe6766d15a4a72979657adfc1c6d8affected554c0a3abf216c991c5ebddcdb2c08689ecd290b to < e14a1148f02e8cf1ca380d57e4b95ca36c97f45daffected554c0a3abf216c991c5ebddcdb2c08689ecd290b to < 4dd2d9cf563c54e09d5f7eacf95c5b8f538b513baffected554c0a3abf216c991c5ebddcdb2c08689ecd290b to < d97fc1b29513010b60fde874c7f0ba816744e18caffected554c0a3abf216c991c5ebddcdb2c08689ecd290b to < a75281626fc8fa6dc6c9cc314ee423e8bc45203baffected
Linux Linux
Default version status: affected
4.12affected0 to < 4.12unaffected5.10.253 to ≤ 5.10.*unaffected5.15.203 to ≤ 5.15.*unaffected6.1.167 to ≤ 6.1.*unaffected6.6.130 to ≤ 6.6.*unaffected6.12.78 to ≤ 6.12.*unaffected6.18.19 to ≤ 6.18.*unaffected6.19.9 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/6ff2243d5e05a5239e39d4ba61d96b0ea3bf7259 ↗
- https://git.kernel.org/stable/c/12cc6e8f8d4245b7b5a408c6fc8ab1d098d67020 ↗
- https://git.kernel.org/stable/c/209644e25757c499e1c1f08c071ea0386d4448b6 ↗
- https://git.kernel.org/stable/c/768f25613a9fe6766d15a4a72979657adfc1c6d8 ↗
- https://git.kernel.org/stable/c/e14a1148f02e8cf1ca380d57e4b95ca36c97f45d ↗
- https://git.kernel.org/stable/c/4dd2d9cf563c54e09d5f7eacf95c5b8f538b513b ↗
- https://git.kernel.org/stable/c/d97fc1b29513010b60fde874c7f0ba816744e18c ↗
- https://git.kernel.org/stable/c/a75281626fc8fa6dc6c9cc314ee423e8bc45203b ↗