In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1000: use vmm_table as array in wilc struct
Enabling KASAN and running some iperf tests raises some memory issues with vmm_table:
BUG: KASAN: slab-out-of-bounds in wilc_wlan_handle_txq+0x6ac/0xdb4 Write of size 4 at addr c3a61540 by task wlan0-tx/95
KASAN detects that we are writing data beyond range allocated to vmm_table. There is indeed a mismatch between the size passed to allocator in wilc_wlan_init, and the range of possible indexes used later: allocation size is missing a multiplication by sizeof(u32)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-hwe-5.15Upgrade linux-gkeopUpgrade linux-gkeop-5.15Upgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-nvidia-6.5Upgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-azureUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-gcp-5.15Upgrade linux-fipsUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-aws-fipsUpgrade linux-lowlatencyUpgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fdeUpgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linuxUpgrade linux-realtimeUpgrade linux-gkeUpgrade linux-bluefieldUpgrade linux-nvidia-tegraUpgrade linux-raspiUpgrade linux-awsUpgrade linux-ibm-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub