Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd before 72bf6944e336d6f046f5c886ebededdd6560a693; affected e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd before 213f9e0ab2b4f35fe8d342333238c6cc91513fbf; affected e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd before 98e5720afd7495eece580238f232e3b3b4c022da; affected e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd before 884495c39de1a02f42bd40051b921e2311d6ac91 |
| Linux / Linux | affected 5.16; unaffected 0 before 5.16; unaffected 6.6.158 through 6.6.*; unaffected 6.12.111 through 6.12.*; unaffected 6.18.53 through 6.18.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.