wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet Only skip the code path trying to access the rfc1042 headers when the buffer is too small, so the driver can still process packets without rfc1042 headers.
Weaknesses (CWE)
- CWE-125 — Out-of-bounds Read
References
- https://git.kernel.org/stable/c/71b1d2b57f145c8469aa9346f0fd57bf59b2b89c
- https://git.kernel.org/stable/c/16cc18b9080892d1a0200a38e36ae52e464bc555
- https://git.kernel.org/stable/c/b8e260654a29de872e7cb85387d8ab8974694e8e
- https://git.kernel.org/stable/c/10a18c8bac7f60d32b7af22da03b66f350beee38
- https://git.kernel.org/stable/c/5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6
- https://git.kernel.org/stable/c/6b706286473db4fd54b5f869faa67f4a8cb18e99
- https://git.kernel.org/stable/c/be2ff39b1504c5359f4a083c1cfcad21d666e216
- https://git.kernel.org/stable/c/aef7a0300047e7b4707ea0411dc9597cba108fc8
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2023-57150
- GCVE · GCVE-0-2023-52525
CERT-FR advisories
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0363 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0329 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.10.195 < 5.10.198cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.132 < 5.15.135cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.1.53 < 6.1.57cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.5.3 < 6.5.7cpe:2.3:o:linux:linux_kernel:4.14.326:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:4.19.295:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.4.257:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected f517c97fc129995de77dd06aa5a74f909ebf568f < 71b1d2b57f145c8469aa9346f0fd57bf59b2b89c ; affected 8824aa4ab62c800f75d96f48e1883a5f56ec5869 < 16cc18b9080892d1a0200a38e36ae52e464bc555 ; affected 29eca8b7863d1d7de6c5b746b374e3487d14f154 < b8e260654a29de872e7cb85387d8ab8974694e8e ; affected 3fe3923d092e22d87d1ed03e2729db444b8c1331 < 10a18c8bac7f60d32b7af22da03b66f350beee38 ; affected 7c54b6fc39eb1aac51cf2945f8a25e2a47fdca02 < 5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6 ; affected 3975e21d4d01efaf0296ded40d11c06589c49245 < 6b706286473db4fd54b5f869faa67f4a8cb18e99 |
| Linux · Linux | affected 4.14.326 < 4.14.327 ; affected 4.19.295 < 4.19.296 ; affected 5.4.257 < 5.4.258 ; affected 5.10.195 < 5.10.198 ; affected 5.15.132 < 5.15.135 ; affected 6.1.53 < 6.1.57 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |