In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1000: use vmm_table as array in wilc struct
Enabling KASAN and running some iperf tests raises some memory issues with vmm_table:
BUG: KASAN: slab-out-of-bounds in wilc_wlan_handle_txq+0x6ac/0xdb4 Write of size 4 at addr c3a61540 by task wlan0-tx/95
KASAN detects that we are writing data beyond range allocated to vmm_table. There is indeed a mismatch between the size passed to allocator in wilc_wlan_init, and the range of possible indexes used later: allocation size is missing a multiplication by sizeof(u32)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kb | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-gcp-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-gcp-fipsUpgrade linux-oracle-5.15Upgrade linux-gkeop-5.15Upgrade linux-lowlatencyUpgrade linux-gcpUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-azure-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-ibmUpgrade linux-fipsUpgrade linux-nvidiaUpgrade linux-hwe-5.15Upgrade linux-gkeopUpgrade linux-azureUpgrade linux-nvidia-6.5Upgrade linux-azure-fdeUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-realtimeUpgrade linux-awsUpgrade linuxUpgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-nvidia-tegra-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub