In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
Make sure that n_channels is set after allocating the struct cfg80211_registered_device::int_scan_req member. Seen with syzkaller:
UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5 index 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]')
This was missed in the initial conversions because I failed to locate the allocation likely due to the "sizeof(void *)" not matching the "channels" array type.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-altera | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-oem-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-kvmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-generic-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-64k-6.8 | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub