Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event: ath6kl_wmi_scan_complete_rx() ath6kl_wmi_addba_req_event_rx() ath6kl_wmi_delba_req_event_rx() Add length checks to prevent overread.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bdcd81707973cf8aa9305337166f8ee842a050d4 to < 144fe0b0fa8f311ebe29ef16c8239bf6a24addc0affectedbdcd81707973cf8aa9305337166f8ee842a050d4 to < a2de3fb4f83a525e95a86a683f0ff105b9b5785baffectedbdcd81707973cf8aa9305337166f8ee842a050d4 to < d1d2ac5f5b1609a05c455d0aed12904b0985530daffectedbdcd81707973cf8aa9305337166f8ee842a050d4 to < ea2a77682f9f984bc9a45a00b7d1aa198503c2feaffectedbdcd81707973cf8aa9305337166f8ee842a050d4 to < 41159d392c3adedc093a8d80521037b72350f606affectedbdcd81707973cf8aa9305337166f8ee842a050d4 to < abda58f4529d7eebb6ef82e2d266dabc17507faaaffectedbdcd81707973cf8aa9305337166f8ee842a050d4 to < 2f3635213ecf52ff943f01645f895cb39db8f0dcaffectedbdcd81707973cf8aa9305337166f8ee842a050d4 to < f57314aade9d74d30f3360ec5ef85a83654748beaffected
Linux Linux
Default version status: affected
3.2affected0 to < 3.2unaffected5.10.270 to ≤ 5.10.*unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/144fe0b0fa8f311ebe29ef16c8239bf6a24addc0 ↗
- https://git.kernel.org/stable/c/a2de3fb4f83a525e95a86a683f0ff105b9b5785b ↗
- https://git.kernel.org/stable/c/d1d2ac5f5b1609a05c455d0aed12904b0985530d ↗
- https://git.kernel.org/stable/c/ea2a77682f9f984bc9a45a00b7d1aa198503c2fe ↗
- https://git.kernel.org/stable/c/41159d392c3adedc093a8d80521037b72350f606 ↗
- https://git.kernel.org/stable/c/abda58f4529d7eebb6ef82e2d266dabc17507faa ↗
- https://git.kernel.org/stable/c/2f3635213ecf52ff943f01645f895cb39db8f0dc ↗
- https://git.kernel.org/stable/c/f57314aade9d74d30f3360ec5ef85a83654748be ↗