CVE-2023-52525 wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

2024-03-0221:52:31

Linux

www.cve.org

cve-2023-52525

mwifiex

oob check

wifi

rfc1042

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

JSON

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

Only skip the code path trying to access the rfc1042 headers when the
buffer is too small, so the driver can still process packets without
rfc1042 headers.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/marvell/mwifiex/sta_rx.c"
    ],
    "versions": [
      {
        "version": "f517c97fc129",
        "lessThan": "71b1d2b57f14",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8824aa4ab62c",
        "lessThan": "16cc18b90808",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "29eca8b7863d",
        "lessThan": "b8e260654a29",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3fe3923d092e",
        "lessThan": "10a18c8bac7f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "7c54b6fc39eb",
        "lessThan": "5afb996349cb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3975e21d4d01",
        "lessThan": "6b706286473d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "650d1bc02fba",
        "lessThan": "be2ff39b1504",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "119585281617",
        "lessThan": "aef7a0300047",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/wireless/marvell/mwifiex/sta_rx.c"
    ],
    "versions": [
      {
        "version": "4.14.326",
        "lessThan": "4.14.327",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "4.19.295",
        "lessThan": "4.19.296",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.4.257",
        "lessThan": "5.4.258",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.10.195",
        "lessThan": "5.10.198",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.15.132",
        "lessThan": "5.15.135",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "6.1.53",
        "lessThan": "6.1.57",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "6.5.3",
        "lessThan": "6.5.7",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]