Ubuntu: (Multiple Advisories) (CVE-2023-52531): Linux kernel vulnerabilities
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, space is kzalloc()'ed for: sizeof(struct iwl_nvm_data) + sizeof(struct ieee80211_channel) + sizeof(struct ieee80211_rate) 'mvm->nvm_data' is a 'struct iwl_nvm_data', so it is fine. At the end of this structure, there is the 'channels' flex array. Each element is of type 'struct ieee80211_channel'. So only 1 element is allocated in this array. When doing: mvm->nvm_data->bands[0].channels = mvm->nvm_data->channels; We point at the first element of the 'channels' flex array. So this is fine. However, when doing: mvm->nvm_data->bands[0].bitrates = (void *)((u8 *)mvm->nvm_data->channels + 1); because of the "(u8 *)" cast, we add only 1 to the address of the beginning of the flex array. It is likely that we want point at the 'struct ieee80211_rate' allocated just after. Remove the spurious casting so that the pointer arithmetic works as expected.
Solution(s)
- ubuntu-upgrade-linux-image-4-15-0-1137-oracle
- ubuntu-upgrade-linux-image-4-15-0-1158-kvm
- ubuntu-upgrade-linux-image-4-15-0-1168-gcp
- ubuntu-upgrade-linux-image-4-15-0-1175-aws
- ubuntu-upgrade-linux-image-4-15-0-1183-azure
- ubuntu-upgrade-linux-image-4-15-0-231-generic
- ubuntu-upgrade-linux-image-4-15-0-231-lowlatency
- ubuntu-upgrade-linux-image-5-4-0-1044-iot
- ubuntu-upgrade-linux-image-5-4-0-1054-xilinx-zynqmp
- ubuntu-upgrade-linux-image-5-4-0-1082-ibm
- ubuntu-upgrade-linux-image-5-4-0-1094-bluefield
- ubuntu-upgrade-linux-image-5-4-0-1102-gkeop
- ubuntu-upgrade-linux-image-5-4-0-1119-raspi
- ubuntu-upgrade-linux-image-5-4-0-1123-kvm
- ubuntu-upgrade-linux-image-5-4-0-1134-oracle
- ubuntu-upgrade-linux-image-5-4-0-1135-aws
- ubuntu-upgrade-linux-image-5-4-0-1139-azure
- ubuntu-upgrade-linux-image-5-4-0-1139-gcp
- ubuntu-upgrade-linux-image-5-4-0-1140-azure
- ubuntu-upgrade-linux-image-5-4-0-200-generic
- ubuntu-upgrade-linux-image-5-4-0-200-generic-lpae
- ubuntu-upgrade-linux-image-5-4-0-200-lowlatency
- ubuntu-upgrade-linux-image-aws
- ubuntu-upgrade-linux-image-aws-hwe
- ubuntu-upgrade-linux-image-aws-lts-18-04
- ubuntu-upgrade-linux-image-aws-lts-20-04
- ubuntu-upgrade-linux-image-azure
- ubuntu-upgrade-linux-image-azure-lts-18-04
- ubuntu-upgrade-linux-image-azure-lts-20-04
- ubuntu-upgrade-linux-image-bluefield
- ubuntu-upgrade-linux-image-gcp
- ubuntu-upgrade-linux-image-gcp-lts-18-04
- ubuntu-upgrade-linux-image-gcp-lts-20-04
- ubuntu-upgrade-linux-image-generic
- ubuntu-upgrade-linux-image-generic-hwe-16-04
- ubuntu-upgrade-linux-image-generic-hwe-18-04
- ubuntu-upgrade-linux-image-generic-lpae
- ubuntu-upgrade-linux-image-gke
- ubuntu-upgrade-linux-image-gkeop
- ubuntu-upgrade-linux-image-gkeop-5-4
- ubuntu-upgrade-linux-image-ibm
- ubuntu-upgrade-linux-image-ibm-lts-20-04
- ubuntu-upgrade-linux-image-kvm
- ubuntu-upgrade-linux-image-lowlatency
- ubuntu-upgrade-linux-image-lowlatency-hwe-16-04
- ubuntu-upgrade-linux-image-lowlatency-hwe-18-04
- ubuntu-upgrade-linux-image-oem
- ubuntu-upgrade-linux-image-oem-osp1
- ubuntu-upgrade-linux-image-oracle
- ubuntu-upgrade-linux-image-oracle-lts-18-04
- ubuntu-upgrade-linux-image-oracle-lts-20-04
- ubuntu-upgrade-linux-image-raspi
- ubuntu-upgrade-linux-image-raspi-hwe-18-04
- ubuntu-upgrade-linux-image-raspi2
- ubuntu-upgrade-linux-image-snapdragon-hwe-18-04
- ubuntu-upgrade-linux-image-virtual
- ubuntu-upgrade-linux-image-virtual-hwe-16-04
- ubuntu-upgrade-linux-image-virtual-hwe-18-04
- ubuntu-upgrade-linux-image-xilinx-zynqmp
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center