In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1000: use vmm_table as array in wilc struct
Enabling KASAN and running some iperf tests raises some memory issues with vmm_table:
BUG: KASAN: slab-out-of-bounds in wilc_wlan_handle_txq+0x6ac/0xdb4 Write of size 4 at addr c3a61540 by task wlan0-tx/95
KASAN detects that we are writing data beyond range allocated to vmm_table. There is indeed a mismatch between the size passed to allocator in wilc_wlan_init, and the range of possible indexes used later: allocation size is missing a multiplication by sizeof(u32)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-obs-build | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegraUpgrade linux-realtimeUpgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-aws-5.15Upgrade linux-ibm-5.15Upgrade linux-azure-fdeUpgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-raspiUpgrade linux-azure-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-hwe-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-nvidia-6.5Upgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-nvidia-tegra-igxUpgrade linux-gcp-fipsUpgrade linux-gkeop-5.15Upgrade linux-oracleUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-azure | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 21, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub