In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
We can get a UBSAN warning if ieee80211_get_tx_power() returns the INT_MIN value mac80211 internally uses for "unset power level".
UBSAN: signed-integer-overflow in net/wireless/nl80211.c:3816:5 -2147483648 * 100 cannot be represented in type 'int' CPU: 0 PID: 20433 Comm: insmod Tainted: G WC OE Call Trace: dump_stack+0x74/0x92 ubsan_epilogue+0x9/0x50 handle_overflow+0x8d/0xd0 __ubsan_handle_mul_overflow+0xe/0x10 nl80211_send_iface+0x688/0x6b0 [cfg80211] [...] cfg80211_register_wdev+0x78/0xb0 [cfg80211] cfg80211_netdev_notifier_call+0x200/0x620 [cfg80211] [...] ieee80211_if_add+0x60e/0x8f0 [mac80211] ieee80211_register_hw+0xda5/0x1170 [mac80211]
In this case, simply return an error instead, to indicate that no data is available.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-devel | Aug 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 21, 2025 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-rt-core | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade kernel-default-baseUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-renesas | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-tegraUpgrade linux-aws-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-raspiUpgrade linux-azureUpgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-bluefieldUpgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-gkeop-5.15Upgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-6.5Upgrade linux-intel-iot-realtimeUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-riscv-5.15Upgrade linux-fipsUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-gcp-5.15Upgrade linuxUpgrade linux-intel-iotgUpgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-xilinx-zynqmpUpgrade linux-aws-fips | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub