In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
Fix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug occurs when txs->cnt, data from a URB provided by a USB device, is bigger than the size of the array txs->txstatus, which is HTC_MAX_TX_STATUS. WARN_ON() already checks it, but there is no bug handling code after the check. Make the function return if that is the case.
Found by a modified version of syzkaller.
UBSAN: array-index-out-of-bounds in htc_drv_txrx.c index 13 is out of range for type '__wmi_event_txstatus [12]' Call Trace: ath9k_htc_txstatus ath9k_wmi_event_tasklet tasklet_action_common __do_softirq irq_exit_rxu sysvec_apic_timer_interrupt
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-headers | Jun 6, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jul 16, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Mar 6, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | Mar 6, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | Mar 6, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade perfUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-devel | Jun 17, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-manUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-baseUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optional | Apr 18, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1124-awsUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.4.0-1139-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-232-genericUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-4.4.0-1177-awsUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-262-genericUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-4.4.0-262-lowlatencyUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1129-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-virtualUpgrade linux-image-generic-64k | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub