In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
Fix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug occurs when txs->cnt, data from a URB provided by a USB device, is bigger than the size of the array txs->txstatus, which is HTC_MAX_TX_STATUS. WARN_ON() already checks it, but there is no bug handling code after the check. Make the function return if that is the case.
Found by a modified version of syzkaller.
UBSAN: array-index-out-of-bounds in htc_drv_txrx.c index 13 is out of range for type '__wmi_event_txstatus [12]' Call Trace: ath9k_htc_txstatus ath9k_wmi_event_tasklet tasklet_action_common __do_softirq irq_exit_rxu sysvec_apic_timer_interrupt
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-docUpgrade perfUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modules | Jun 6, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jul 16, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Mar 6, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 6, 2024 | Mar 6, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | Mar 6, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernelUpgrade kernel-rt-debug-develUpgrade perf-debuginfo | Jun 17, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-azure-baseUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kernel-sourceUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade cluster-md-kmp-64kb | Apr 18, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-232-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-azureUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-intelUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-oemUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-starfiveUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.4.0-1177-awsUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-bluefieldUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-4.4.0-262-lowlatencyUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-4.4.0-262-genericUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-raspi2 | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub