In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
Because the loop-expression will do one more time before getting false from cond-expression, the original code copied one more entry size beyond valid region.
Fix it by moving the entry copy to loop-body.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azureUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-awsUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-24.04 | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub