Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4) against remaining parser length before consuming bytes from the firmware image. This avoids length underflow on malformed TLVs.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
dd7a2509b3a79b290730a9c6a784bf03fedabb9a to < 61da42fdd21d98ccb8f1ec5224659f3d09202cf4affecteddd7a2509b3a79b290730a9c6a784bf03fedabb9a to < 8c332d45b736d41301b7e07f322785d821265dbcaffecteddd7a2509b3a79b290730a9c6a784bf03fedabb9a to < ce709fcab5e1d4df6d4ba980736dc5908502a40faffecteddd7a2509b3a79b290730a9c6a784bf03fedabb9a to < 4cfadb2e01566bc36d42922fbe18838345087050affecteddd7a2509b3a79b290730a9c6a784bf03fedabb9a to < 528fa9eb14c209533ca26958b76da55e0ce239d8affecteddd7a2509b3a79b290730a9c6a784bf03fedabb9a to < 7aa9097623afb694bc25382a62e14d8e82bf002faffecteddd7a2509b3a79b290730a9c6a784bf03fedabb9a to < acad742714bdc70e7fd7f234323807c596828213affected
Linux Linux
Default version status: affected
2.6.35affected0 to < 2.6.35unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/61da42fdd21d98ccb8f1ec5224659f3d09202cf4 ↗
- https://git.kernel.org/stable/c/8c332d45b736d41301b7e07f322785d821265dbc ↗
- https://git.kernel.org/stable/c/ce709fcab5e1d4df6d4ba980736dc5908502a40f ↗
- https://git.kernel.org/stable/c/4cfadb2e01566bc36d42922fbe18838345087050 ↗
- https://git.kernel.org/stable/c/528fa9eb14c209533ca26958b76da55e0ce239d8 ↗
- https://git.kernel.org/stable/c/7aa9097623afb694bc25382a62e14d8e82bf002f ↗
- https://git.kernel.org/stable/c/acad742714bdc70e7fd7f234323807c596828213 ↗