In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: Avoid address calculations via out of bounds array indexing
Before request->channels[] can be used, request->n_channels must be set. Additionally, address calculations for memory after the "channels" array need to be calculated from the allocation base ("request") rather than via the first "out of bounds" index of "channels", otherwise run-time bounds checking will throw a warning.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-64k-debug-coreUpgrade kernel-debug-develUpgrade perfUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modulesUpgrade kernel-debugUpgrade libperfUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-abi-stablelistsUpgrade rvUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-64k-debugUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-core | Nov 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade kernel-rt-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-azure | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub