In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: Avoid address calculations via out of bounds array indexing
Before request->channels[] can be used, request->n_channels must be set. Additionally, address calculations for memory after the "channels" array need to be calculated from the allocation base ("request") rather than via the first "out of bounds" index of "channels", otherwise run-time bounds checking will throw a warning.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libperfUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade bpftoolUpgrade perfUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-docUpgrade kernel-64k-coreUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules | Nov 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-renesas | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-24.04 | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub