Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix buffer over-read in rtw_update_protection rtw_update_protection() is called with a pointer offset into the ies buffer but the full ie_length is passed, causing a potential buffer over-read.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected d3fcee1b78a533c256077f1300dd236801397cf7 before d95edbbf7830d77ad68d437c384055eac8cd9892; affected d3fcee1b78a533c256077f1300dd236801397cf7 before c35ce55b12bb8fcd365daeb516e9782048119b36; affected d3fcee1b78a533c256077f1300dd236801397cf7 before 735dabdf21561a24d8bcae456c9c32f7f961a029; affected d3fcee1b78a533c256077f1300dd236801397cf7 before 303f65af819f6d5aa302e82bce72b57a8575faea; affected d3fcee1b78a533c256077f1300dd236801397cf7 before 514ab98364595007d4557ecc85d7e5f012c504d3 |
| Linux / Linux | affected 5.15; unaffected 0 before 5.15; unaffected 6.6.160 through 6.6.*; unaffected 6.12.95 through 6.12.*; unaffected 6.18.36 through 6.18.*; unaffected 7.0.13 through 7.0.*; unaffected 7.1 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/d95edbbf7830d77ad68d437c384055eac8cd9892
- https://git.kernel.org/stable/c/c35ce55b12bb8fcd365daeb516e9782048119b36
- https://git.kernel.org/stable/c/735dabdf21561a24d8bcae456c9c32f7f961a029
- https://git.kernel.org/stable/c/303f65af819f6d5aa302e82bce72b57a8575faea
- https://git.kernel.org/stable/c/514ab98364595007d4557ecc85d7e5f012c504d3