Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Just like in commit 154828bf9559 ("staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser"), we don't trust the data in the frame so we should check the length better before acting on it
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b before ac38856092b4c994f94343251b30520bdeb7f475; affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b before 35969c3a208a07cb8642301df5869c34e2db7071; affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b before 8097a48c606a9306281ea7bd73bf2afc97553733; affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b before 740bca8bbdb707c0e4bb11e3316deb2f04fc7ce1; affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b before 821f7d759fb2de33c5e5b0c4981181c4d0c3e9b1; affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b before 6d62fa548387e159a21ea95132c09bfc96d336ed; affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b before 9a4cd4c37593cc8b8d28f9a6732b490a8032006a; affected 554c0a3abf216c991c5ebddcdb2c08689ecd290b before f0109b9d3e1e455429279d602f6276e34689750a |
| Linux / Linux | affected 4.12; unaffected 0 before 4.12; unaffected 5.10.253 through 5.10.*; unaffected 5.15.203 through 5.15.*; unaffected 6.1.167 through 6.1.*; unaffected 6.6.130 through 6.6.*; unaffected 6.12.78 through 6.12.*; unaffected 6.18.19 through 6.18.*; unaffected 6.19.9 through 6.19.*; unaffected 7.0 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/ac38856092b4c994f94343251b30520bdeb7f475
- https://git.kernel.org/stable/c/35969c3a208a07cb8642301df5869c34e2db7071
- https://git.kernel.org/stable/c/8097a48c606a9306281ea7bd73bf2afc97553733
- https://git.kernel.org/stable/c/740bca8bbdb707c0e4bb11e3316deb2f04fc7ce1
- https://git.kernel.org/stable/c/821f7d759fb2de33c5e5b0c4981181c4d0c3e9b1
- https://git.kernel.org/stable/c/6d62fa548387e159a21ea95132c09bfc96d336ed
- https://git.kernel.org/stable/c/9a4cd4c37593cc8b8d28f9a6732b490a8032006a
- https://git.kernel.org/stable/c/f0109b9d3e1e455429279d602f6276e34689750a