In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: Avoid address calculations via out of bounds array indexing
Before request->channels[] can be used, request->n_channels must be set. Additionally, address calculations for memory after the "channels" array need to be calculated from the allocation base ("request") rather than via the first "out of bounds" index of "channels", otherwise run-time bounds checking will throw a warning.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-debug-modulesUpgrade rvUpgrade kernel-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade bpftoolUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-64k-modules-coreUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debug-core | Nov 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmallUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rt | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azure-fde | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub