Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware buffer, make the record loop fail to advance, or index phy->clc past its end. Validate the table and record bounds before dereferencing or copying.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to < 46673662402884ca55a869e4ebe956e08e8b6b05affected23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to < 740272d46ffc8231709a5e774cf5e4a5785b8a02affected23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to < 602a950134ee2940136f60797e4457c3983b06ceaffected23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to < 3896be051e928c891922d91de94c99519d215dffaffected23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to < 3c505e2af16a9320f4355218394a955fbbc65322affected23bdc5d8cadfc941e7782d0cb8afb2d9ae73b125 to < 9417c5818a0146980c2608fda94c908e604eb033affected
Linux Linux
Default version status: affected
6.1affected0 to < 6.1unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2.7 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/46673662402884ca55a869e4ebe956e08e8b6b05 ↗
- https://git.kernel.org/stable/c/740272d46ffc8231709a5e774cf5e4a5785b8a02 ↗
- https://git.kernel.org/stable/c/602a950134ee2940136f60797e4457c3983b06ce ↗
- https://git.kernel.org/stable/c/3896be051e928c891922d91de94c99519d215dff ↗
- https://git.kernel.org/stable/c/3c505e2af16a9320f4355218394a955fbbc65322 ↗
- https://git.kernel.org/stable/c/9417c5818a0146980c2608fda94c908e604eb033 ↗