Description
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction Add guards to ensure ie_length is large enough before subtracting fixed IE offsets to prevent unsigned integer underflow.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d3fcee1b78a533c256077f1300dd236801397cf7 to < 18143799ad51a32b1351e4e1591b6285a0a9d7ddaffectedd3fcee1b78a533c256077f1300dd236801397cf7 to < 8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160affectedd3fcee1b78a533c256077f1300dd236801397cf7 to < 637e0ea73f690028796ee2fc72a2ac4ec32968c6affectedd3fcee1b78a533c256077f1300dd236801397cf7 to < 542d65a6dbd9733baab96313c9fe76a76e93f484affectedd3fcee1b78a533c256077f1300dd236801397cf7 to < 88e994c57a79f62d5338231d8d37ee8dd98baffeaffected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.0.13 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/18143799ad51a32b1351e4e1591b6285a0a9d7dd ↗
- https://git.kernel.org/stable/c/8863ac3a4fedf86b0ef5b8ecc37fbaa52f2a8160 ↗
- https://git.kernel.org/stable/c/637e0ea73f690028796ee2fc72a2ac4ec32968c6 ↗
- https://git.kernel.org/stable/c/542d65a6dbd9733baab96313c9fe76a76e93f484 ↗
- https://git.kernel.org/stable/c/88e994c57a79f62d5338231d8d37ee8dd98baffe ↗