In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
Replace one-element array with a flexible-array member in `struct host_cmd_ds_802_11_scan_ext`.
With this, fix the following warning:
elo 16 17:51:58 surfacebook kernel: ------------[ cut here ]------------ elo 16 17:51:58 surfacebook kernel: memcpy: detected field-spanning write (size 243) of single field "ext_scan->tlv_buffer" at drivers/net/wireless/marvell/mwifiex/scan.c:2239 (size 1) elo 16 17:51:58 surfacebook kernel: WARNING: CPU: 0 PID: 498 at drivers/net/wireless/marvell/mwifiex/scan.c:2239 mwifiex_cmd_802_11_scan_ext+0x83/0x90 [mwifiex]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oemUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-4.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-249-lowlatencyUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1146-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-1191-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1153-oracleUpgrade linux-image-4.15.0-1200-azureUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.4.0-280-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-gcp-4.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-4.15.0-2109-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-aws-4.15Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-azureUpgrade linux-image-4.4.0-1192-awsUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-4.15.0-1184-gcpUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-azure-fips-4.15Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-249-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-4.4.0-1155-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-4.15.0-2092-gcp-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-azure-4.15Upgrade linux-image-intel-iotgUpgrade linux-image-aws-fips-4.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-4.15.0-2129-aws-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-4.4.0-280-genericUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-4.4.0-1154-awsUpgrade linux-image-4.15.0-1173-kvmUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-24.04 | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub