In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: Avoid address calculations via out of bounds array indexing
Before request->channels[] can be used, request->n_channels must be set. Additionally, address calculations for memory after the "channels" array need to be calculated from the allocation base ("request") rather than via the first "out of bounds" index of "channels", otherwise run-time bounds checking will throw a warning.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade rtlaUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade rvUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-tools | Nov 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade dtb-caviumUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-devel | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04a | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub