In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: Avoid address calculations via out of bounds array indexing
Before request->channels[] can be used, request->n_channels must be set. Additionally, address calculations for memory after the "channels" array need to be calculated from the allocation base ("request") rather than via the first "out of bounds" index of "channels", otherwise run-time bounds checking will throw a warning.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-coreUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-develUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade rtlaUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64kUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-64k-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-64k-modulesUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade perfUpgrade bpftoolUpgrade kernel-devel | Nov 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade dtb-caviumUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdso | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fde | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub