52 matches found
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mvm: Pause TCM when the firmware is stopped Not doing so will cause us to send a host command to the transport module while the firmware is inactive, which will trigger a WARNING. bad state = 0 WARNING: CPU: 2 PID:...
ROS-20260924-73-0035
The vulnerability of the iwlagnsendstakey function in the drivers/net/wireless/intel/iwlwifi/dvm/sta.c file of the Intel wireless driver for the Linux operating system is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the...
SUSE CVE-2026-64176
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encoded in version 1 format, which doesn't use the CCK/OFDM rate index 0-3/0-7 but rather their PLCP value e.g. 10 for 1 Mbp...
Linux Kernel Security Vulnerabilities
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from array out-of-bounds access during the 22000 series SMEM parsing in iwlwifi...
CVE-2026-31779 wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwlmvmndmatchinfohandler The memcpy function assumes the dynamic array notif-matches is at least as large as the number of bytes to copy. Otherwise, results-matches may...
EUVD-2026-26592
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwlmvmndmatchinfohandler The memcpy function assumes the dynamic array notif-matches is at least as large as the number of bytes to copy. Otherwise, results-matches may...
ROS-20260414-73-0054
A vulnerability in the iwlpcieirqrqrxmsixhandler function of the drivers/net/wireless/intel/iwlwifi/pcie/rx.c module of the Intel Wireless Adapter Driver in the Linux kernel is related to NULL pointer dereferencing. Exploitation of the vulnerability may allow an intruder to affect confidentiality...
Intel wireless driver module NVM Buffer Overflow
The vulnerability of the iwlmvmupdatemcc function in the drivers/net/wireless/intel/iwlwifi/mvm/nvm.c file of the Intel wireless driver module is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
Intel wireless driver Heap Buffer Overflow DoS
The vulnerability of the function iwldbgfsfwinfoseqnext in the driver module drivers/net/wireless/intel/iwlwifi/fw/debugfs.c of the Intel wireless communication adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiti...
Intel wireless driver Heap Buffer Overflow DoS
The vulnerability of the iwlmeihandlesapdata function in the drivers/net/wireless/intel/iwlwifi/mei/main.c file of the Intel wireless adapter support driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service...
CVE-2025-71226
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Intel wireless driver Heap Buffer Overflow DoS
The vulnerability of the iwltxqreclaim function in the drivers/net/wireless/intel/iwlwifi/queue/tx.c file of the Intel wireless driver for Linux operating systems is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Intel wireless communication driver Heap Buffer Overflow DoS
The vulnerability of the iwlmeirxfilter function in the drivers/net/wireless/intel/iwlwifi/mei/net.c module of the Intel wireless communication driver for Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to access protected...
CVE-2022-50784
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, but rather return as if we should pass it. Coverity CID: 1503456...
CVE-2023-54053
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possible that iwlpciprobe will fail and free the trans, then afterwards iwlpciremove will be called and crash by trying to access trans which is already freed, fix...
Intel wireless driver Time Event DoS
The vulnerability of the iwlmvmremovetimeevent function in the drivers/net/wireless/intel/iwlwifi/mvm/time-event.c file of the Intel wireless driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service...
CVE-2025-30255
Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...
CVE-2025-30255
Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...
CVE-2023-53575
In CVE-2023-53575, the Linux kernel wifi driver (iwlwifi, mvm) fixes a potential array out-of-bounds access by accounting for IWL_SEC_WEP_KEY_OFFSET when verifying key_len in iwl_mvm_sec_key_add(). The fix is implemented in the kernel code referenced in the stable commits: https://git.kernel.org/...