In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1000: use vmm_table as array in wilc struct
Enabling KASAN and running some iperf tests raises some memory issues with vmm_table:
BUG: KASAN: slab-out-of-bounds in wilc_wlan_handle_txq+0x6ac/0xdb4 Write of size 4 at addr c3a61540 by task wlan0-tx/95
KASAN detects that we are writing data beyond range allocated to vmm_table. There is indeed a mismatch between the size passed to allocator in wilc_wlan_init, and the range of possible indexes used later: allocation size is missing a multiplication by sizeof(u32)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-docs-html | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-oracle-5.15Upgrade linux-oracleUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-intel-iot-realtimeUpgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-nvidia-6.5Upgrade linux-nvidiaUpgrade linux-gkeop-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-fipsUpgrade linux-lowlatencyUpgrade linux-aws-fipsUpgrade linux-nvidia-tegra-igxUpgrade linux-gcpUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-azureUpgrade linux-kvmUpgrade linuxUpgrade linux-gkeUpgrade linux-nvidia-tegraUpgrade linux-azure-fdeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-realtime | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub