Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() Replace one-element array with a flexible-array member in `struct host_cmd_ds_802_11_scan_ext`. With this, fix the following warning: elo 16 17:51:58 surfacebook kernel: ------------[ cut here ]------------ elo 16 17:51:58 surfacebook kernel: memcpy: detected field-spanning write (size 243) of single field "ext_scan->tlv_buffer" at drivers/net/wireless/marvell/mwifiex/scan.c:2239 (size 1) elo 16 17:51:58 surfacebook kernel: WARNING: CPU: 0 PID: 498 at drivers/net/wireless/marvell/mwifiex/scan.c:2239 mwifiex_cmd_802_11_scan_ext+0x83/0x90 [mwifiex]
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 21f58d200388480547df909b5464b5aafebf299d before b55c8848fdc81514ec047b2a0ec782ffe9ab5323; affected 21f58d200388480547df909b5464b5aafebf299d before f9310a6704bf52e2493480edea896e1f9b795d40; affected 21f58d200388480547df909b5464b5aafebf299d before 1756918f51e9ab247a0f4782cc28853c2bb457c1; affected 21f58d200388480547df909b5464b5aafebf299d before e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe; affected 21f58d200388480547df909b5464b5aafebf299d before 17199b69a84798efffc475040fbef44374ef1de1; affected 21f58d200388480547df909b5464b5aafebf299d before fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc; affected 21f58d200388480547df909b5464b5aafebf299d before 71267bd4e8c752d7af6c6b96bb83984a6a95273d; affected 21f58d200388480547df909b5464b5aafebf299d before a3a12c30f9510f3753286fadbc6cdb7dad78c1d5; affected 21f58d200388480547df909b5464b5aafebf299d before 498365e52bebcbc36a93279fe7e9d6aec8479cee |
| Linux / Linux | affected 3.15; unaffected 0 before 3.15; unaffected 4.19.323 through 4.19.*; unaffected 5.4.285 through 5.4.*; unaffected 5.10.227 through 5.10.*; unaffected 5.15.168 through 5.15.*; unaffected 6.1.113 through 6.1.*; unaffected 6.6.55 through 6.6.*; unaffected 6.10.14 through 6.10.*; unaffected 6.11.3 through 6.11.*; unaffected 6.12 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/b55c8848fdc81514ec047b2a0ec782ffe9ab5323
- https://git.kernel.org/stable/c/f9310a6704bf52e2493480edea896e1f9b795d40
- https://git.kernel.org/stable/c/1756918f51e9ab247a0f4782cc28853c2bb457c1
- https://git.kernel.org/stable/c/e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe
- https://git.kernel.org/stable/c/17199b69a84798efffc475040fbef44374ef1de1
- https://git.kernel.org/stable/c/fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc
- https://git.kernel.org/stable/c/71267bd4e8c752d7af6c6b96bb83984a6a95273d
- https://git.kernel.org/stable/c/a3a12c30f9510f3753286fadbc6cdb7dad78c1d5
- https://git.kernel.org/stable/c/498365e52bebcbc36a93279fe7e9d6aec8479cee
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
No English description supplied.