In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
Make sure that n_channels is set after allocating the struct cfg80211_registered_device::int_scan_req member. Seen with syzkaller:
UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]')
This was missed in the initial conversions because I failed to locate the allocation likely due to the "sizeof(void *)" not matching the "channels" array type.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-exynosUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-default-develUpgrade dtb-renesasUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-azureUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-default | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-ibmUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-oem-6.14Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub