kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS

A flaw was found in the Linux kernel. The Intel Wireless WiFi MVM Firmware driver mishandles resource cleanup during device coredump. An attacker able to trigger the device coredump and system-wide out of memory conditions at the same time could use this flaw to crash the system. The highest thre...

kernel: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS

A flaw was found in the way the Intel Wireless driver in the Linux kernel handled resource cleanup during Gen 3 device initialization. This flaw allows an attacker with the ability to restrict access to DMA coherent memory on device initialization, to crash the system...

kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c

A flaw was found in the Linux kernel. A check was not done on the allocworkqueue return value of the iwltranspciealloc function potentially leading to a NULL pointer dereference. This error condition could lead to a denial of service. The highest threat from this vulnerability is to system...

Denial Of Service (DoS)

The kernel package is vulnerable to Denial Of Service DoS. A race condition was found in the mac80211 implementation, a framework used for writing drivers for wireless devices. An attacker could trigger this flaw by sending a Delete Block ACK DELBA packet to a target system, resulting in a remote...

CVE-2019-19058

A flaw was found in the Linux kernel. The Intel Wireless WiFi MVM Firmware driver mishandles resource cleanup during device coredump. An attacker able to trigger the device coredump and system-wide out of memory conditions at the same time could use this flaw to crash the system. The highest thre...

The vulnerability of Intel WIFI drivers, related to operations beyond the buffer in memory, allows attackers to escalate their privileges, cause service failures, and disclose sensitive information.

The vulnerability of Intel WIFI drivers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain enhanced privileges, cause service failures, and expose sensitive information...

CVE-2019-19059

A flaw was found in the way the Intel Wireless driver in the Linux kernel handled resource cleanup during Gen 3 device initialization. This flaw allows an attacker with the ability to restrict access to DMA coherent memory on device initialization, to crash the system. Mitigation In order to...

Linux kernel memory leak vulnerability (CNVD-2019-41710)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the 'iwlpciectxtinfogen3init' function in the drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c file of Linux kernel...

CVE-2019-19059

Multiple memory leaks in the iwlpciectxtinfogen3init function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service memory consumption by triggering iwlpcieinitfwsec or dmaalloccoherent failures, aka...

Intel PROSet/Wireless WiFi Software Multiple Security Vulnerabilities

Description Intel PROSet/Wireless WiFi Software is prone to multiple security vulnerabilities. A local attacker can leverage these issues to gain elevated privileges, obtain sensitive information or cause denial-of-service conditions. Versions prior to Intel PROSet/Wireless WiFi Software 21.40 ar...

Linux kernel null pointer dereference vulnerability (CNVD-2019-31641)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A null pointer dereference vulnerability exists in Linux kernel 5.2.14. The vulnerability stems from drivers/net/wireless/intel/iwlwifi/pcie/trans.c not checking the...

Updated kernel packages fix security vulnerabilities

This kernel update provides an update to the kernel 5.2 series, currently based on 5.2.7 adding support for newer hardware and other new features. It also fixes at least the following security issues: A Spectre SWAPGS gadget was found in the Linux kernel's implementation of system interrupts. An...

MGASA-2019-0220 Updated kernel packages fix security vulnerabilities

This kernel update provides an update to the kernel 5.2 series, currently based on 5.2.7 adding support for newer hardware and other new features. It also fixes at least the following security issues: A Spectre SWAPGS gadget was found in the Linux kernel's implementation of system interrupts. An...

CVE-2012-6712

A vulnerability was found in the Linux kernel’s Intel wireless driver drivers/net/wireless/iwlwifi/iwl-agn-sta.c where the driver could be forced to connect to an invalid station. An attacker could use this flaw to corrupt memory or create a situation allowing for privilege escalation...

Intel Dual Band Wireless-AC 8260 vulnerable to denial-of-service (DoS)

Overview Intel Dual Band Wireless-AC 8260 contains a denial-of-service DoS vulnerability CWE-400. Yusuke Ogawa of Cisco Systems G.K. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An attacker may be able to...

JVN#75617741: Intel Dual Band Wireless-AC 8260 vulnerable to denial-of-service (DoS)

Intel Dual Band Wireless-AC 8260 contains a denial-of-service DoS vulnerability CWE-400. Impact An attacker may be able to cause a denial-of-service DoS. Solution Update the device driver Apply the appropriate device driver update according to the information provided by the developer. Products...

[SECURITY] [DLA 1747-1] firmware-nonfree security update

Package : firmware-nonfree Version : 20161130-5deb8u1 CVE ID : CVE-2018-5383 Eli Biham and Lior Neumann discovered a cryptographic weakness in the Bluetooth LE SC pairing protocol, called the Fixed Coordinate Invalid Curve Attack CVE-2018-5383. Depending on the devices used, this could be exploit...

Debian DLA-1747-1 : firmware-nonfree security update

Eli Biham and Lior Neumann discovered a cryptographic weakness in the Bluetooth LE SC pairing protocol, called the Fixed Coordinate Invalid Curve Attack CVE-2018-5383. Depending on the devices used, this could be exploited by a nearby attacker to obtain sensitive information, for denial of servic...

Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC Intel wireless driver and related software DLL injection vulnerabilities

Intel Dual Band Wireless-AC, Tri-Band Wireless-AC, and Wireless-AC are wireless NIC products from Intel Corporation.Intel wireless drivers is one of the wireless NIC drivers.Autorun.exe is one of the Autorun.exe is an executable file; Setup.exe is an installation file. A security vulnerability...

Design/Logic Flaw

DLL injection vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related software in Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC family of products allows a local attacker to cause escalation of privilege via remote code...