In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
A received TKIP key may be up to 32 bytes because it may contain MIC rx/tx keys too. These are not used by iwl and copying these over overflows the iwl_keyinfo.key field.
Add a check to not copy more data to iwl_keyinfo.key then will fit.
This fixes backtraces like this one:
memcpy: detected field-spanning write (size 32) of single field "sta_cmd.key.key" at drivers/net/wireless/intel/iwlwifi/dvm/sta.c:1103 (size 16) WARNING: CPU: 1 PID: 946 at drivers/net/wireless/intel/iwlwifi/dvm/sta.c:1103 iwlagn_send_sta_key+0x375/0x390 [iwldvm] <snip> Hardware name: Dell Inc. Latitude E6430/0H3MT5, BIOS A21 05/08/2017 RIP: 0010:iwlagn_send_sta_key+0x375/0x390 [iwldvm] <snip> Call Trace: <TASK> iwl_set_dynamic_key+0x1f0/0x220 [iwldvm] iwlagn_mac_set_key+0x1e4/0x280 [iwldvm] drv_set_key+0xa4/0x1b0 [mac80211] ieee80211_key_enable_hw_accel+0xa8/0x2d0 [mac80211] ieee80211_key_replace+0x22d/0x8e0 [mac80211] <snip>
CVSS Details
- CVSS 3.1 Base Score: 7.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.4Upgrade linux-azure-5.15Upgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-raspiUpgrade linux-intel-iotgUpgrade linux-gcp-fipsUpgrade linux-nvidiaUpgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-azure-5.4Upgrade linux-azure-fde-5.15Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-iotUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-gkeUpgrade linux-ibm-5.4Upgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.4 | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub