In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1000: use vmm_table as array in wilc struct
Enabling KASAN and running some iperf tests raises some memory issues with vmm_table:
BUG: KASAN: slab-out-of-bounds in wilc_wlan_handle_txq+0x6ac/0xdb4 Write of size 4 at addr c3a61540 by task wlan0-tx/95
KASAN detects that we are writing data beyond range allocated to vmm_table. There is indeed a mismatch between the size passed to allocator in wilc_wlan_init, and the range of possible indexes used later: allocation size is missing a multiplication by sizeof(u32)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade dtb-appleUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade kernel-azure-optional | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gkeUpgrade linuxUpgrade linux-ibm-5.15Upgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-nvidia-tegraUpgrade linux-realtimeUpgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-gkeop-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-azureUpgrade linux-nvidiaUpgrade linux-nvidia-6.5Upgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-intel-iotg-5.15Upgrade linux-intel-iot-realtime | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub