Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds access in monitor In NAN, we don't know on what band the frame will be sent. Therefore we set info->band to NUM_NL80211_BANDS. However, this leads to out-of-bound access in ieee80211_add_tx_radiotap_header when we try to access the sbands array. Fix it by not accessing the array if the band is NUM_NL80211_BANDS. This means that we will not report rate info for legacy rate in NAN. But nobody really cares about it.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
fc41f4a28ac4d462487903229494eeb266f68a40 to < 7f087f70e020b16a5b967332ee6e937817eaa173affectedfc41f4a28ac4d462487903229494eeb266f68a40 to < 03c41203ee5a833a9d7a7630be190830cede29d8affected
Linux Linux
Default version status: affected
6.18affected0 to < 6.18unaffected6.18.53 to ≤ 6.18.*unaffected7.2 to ≤ *unaffected