In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
Fix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug occurs when txs->cnt, data from a URB provided by a USB device, is bigger than the size of the array txs->txstatus, which is HTC_MAX_TX_STATUS. WARN_ON() already checks it, but there is no bug handling code after the check. Make the function return if that is the case.
Found by a modified version of syzkaller.
UBSAN: array-index-out-of-bounds in htc_drv_txrx.c index 13 is out of range for type '__wmi_event_txstatus [12]' Call Trace: ath9k_htc_txstatus ath9k_wmi_event_tasklet tasklet_action_common __do_softirq irq_exit_rxu sysvec_apic_timer_interrupt
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules | Jun 6, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 16, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Mar 6, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | Mar 6, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 6, 2024 | Mar 6, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules | Jun 17, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade kernel-default-manUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-lgUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-default | Apr 18, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-4.4.0-262-lowlatencyUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-4.4.0-262-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-bluefieldUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-raspi2Upgrade linux-image-ibmUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-4.4.0-1177-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-181-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1124-awsUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-oracleUpgrade linux-image-starfiveUpgrade linux-image-4.15.0-232-genericUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-lowlatency-hwe-18.04 | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub