Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() When the first entry in msdu_details has a zero buffer address, the code accesses msdu_details[i - 1] with i == 0, causing a buffer underflow. Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding a separate check for i == 0 before the main condition to prevent the out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d5c65159f2895379e11ca13f62feabe93278985d to < 085a5fde5bac29c01059e69399b417e91c0a6c18affectedd5c65159f2895379e11ca13f62feabe93278985d to < 31ea4b175bc3ab430be15834d9ee8a1ce65bee15affectedd5c65159f2895379e11ca13f62feabe93278985d to < 20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591affectedd5c65159f2895379e11ca13f62feabe93278985d to < 69a6a4f60b2da92c0bdfd9264b8ffe053f51f52aaffectedd5c65159f2895379e11ca13f62feabe93278985d to < 904367381a922aa2dc3e8bd2488e6c9180516c7aaffectedd5c65159f2895379e11ca13f62feabe93278985d to < a154ca3c441a67d36b3a9ea63a4f11b06abe6223affectedd5c65159f2895379e11ca13f62feabe93278985d to < 725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5affectedd5c65159f2895379e11ca13f62feabe93278985d to < 7f11e70629650ff6ea140984e5ce188b775b2683affected
Linux Linux
Default version status: affected
5.6affected0 to < 5.6unaffected5.10.265 to ≤ 5.10.*unaffected5.15.216 to ≤ 5.15.*unaffected6.1.183 to ≤ 6.1.*unaffected6.6.148 to ≤ 6.6.*unaffected6.12.101 to ≤ 6.12.*unaffected6.18.42 to ≤ 6.18.*unaffected7.1.6 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/085a5fde5bac29c01059e69399b417e91c0a6c18 ↗
- https://git.kernel.org/stable/c/31ea4b175bc3ab430be15834d9ee8a1ce65bee15 ↗
- https://git.kernel.org/stable/c/20d18a5ec6ec364fcaf0d03af6fc43dcc42c6591 ↗
- https://git.kernel.org/stable/c/69a6a4f60b2da92c0bdfd9264b8ffe053f51f52a ↗
- https://git.kernel.org/stable/c/904367381a922aa2dc3e8bd2488e6c9180516c7a ↗
- https://git.kernel.org/stable/c/a154ca3c441a67d36b3a9ea63a4f11b06abe6223 ↗
- https://git.kernel.org/stable/c/725c1c3a8c5d920a7d3f5887412f2ad8e95a74f5 ↗
- https://git.kernel.org/stable/c/7f11e70629650ff6ea140984e5ce188b775b2683 ↗