CVE-2024-26610 — wifi: iwlwifi: fix a memory corruption

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix a memory corruption iwl_fw_ini_trigger_tlv::data is a pointer to a __le32, which means that if we copy to iwl_fw_ini_trigger_tlv::data + offset while offset is in bytes, we'll write past the buffer.

Affected (CNA)

Vendor / product	Versions
Linux / Linux	affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before 05dd9facfb9a1e056752c0901c6e86416037d15a; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before 99a23462fe1a6f709f0fda3ebbe8b6b193ac75bd; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before aa2cc9363926991ba74411e3aa0a0ea82c1ffe32; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before 870171899d75d43e3d14360f3a4850e90a9c289b; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before f32a81999d0b8e5ce60afb5f6a3dd7241c17dd67; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before cf4a0d840ecc72fcf16198d5e9c505ab7d5a5e4d
Linux / Linux	affected 5.5; unaffected 0 before 5.5; unaffected 5.10.210 through 5.10.; unaffected 5.15.149 through 5.15.; unaffected 6.1.76 through 6.1.; unaffected 6.6.15 through 6.6.; unaffected 6.7.3 through 6.7.; unaffected 6.8 through

Vendor / product

Versions

Linux / Linux

affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before 05dd9facfb9a1e056752c0901c6e86416037d15a; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before 99a23462fe1a6f709f0fda3ebbe8b6b193ac75bd; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before aa2cc9363926991ba74411e3aa0a0ea82c1ffe32; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before 870171899d75d43e3d14360f3a4850e90a9c289b; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before f32a81999d0b8e5ce60afb5f6a3dd7241c17dd67; affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 before cf4a0d840ecc72fcf16198d5e9c505ab7d5a5e4d

Linux / Linux

affected 5.5; unaffected 0 before 5.5; unaffected 5.10.210 through 5.10.*; unaffected 5.15.149 through 5.15.*; unaffected 6.1.76 through 6.1.*; unaffected 6.6.15 through 6.6.*; unaffected 6.7.3 through 6.7.*; unaffected 6.8 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.