26 matches found
EUVD-2026-55600
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...
CVE-2026-64571 wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate RX frame length in p54rxeepromreadback p54rxeepromreadback copies the requested EEPROM slice out of a device-supplied readback frame without checking that the skb actually holds that many bytes. Commit...
wifi: nl80211: reject oversized EMA RNR lists
...
The vulnerability of the nl80211_parse_mbssid_elems() function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support allows a hacker to cause a service failure.
The vulnerability of the nl80211parsembssidelems function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the nl80211_parse_mbssid_elems() function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support allows a hacker to cause a service failure.
The vulnerability of the nl80211parsembssidelems function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...
wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
...
Vulnerability of the ath12k_htt_print_tx_selfgen_ac_stats_tlv() function in the drivers/net/wireless/ath/ath12k/debugfs_htt_stats.c module – a driver for Atheros/Qualcomm wireless adapter support in the Linux operating system. This vulnerability allows an attacker to access protected information or cause service failure.
Vulnerability of the ath12khttprinttxselfgenacstatstlv function in the drivers/net/wireless/ath/ath12k/debugfshttstats.c module – The Linux operating system’s Atheros/Qualcomm wireless adapter support driver relies on buffer overflow attacks. Exploiting this vulnerability can allow attackers to...
The vulnerability in the function ath9k_htc_probe_device() of the drivers/net/wireless/ath/ath9k/htc_drv_init.c file, a driver for Atheros/Qualcomm wireless adapter devices in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath9khtcprobedevice function in the drivers/net/wireless/ath/ath9k/htcdrvinit.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the reutilization of previously freed memory due to incorrect initialization. Exploiting this...
The vulnerability of the mwifiexhandle_uap_rx_forward() function in the drivers/net/wireless/marvell/mwifiex/uap_txrx.c file of the Marvell wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mwifiexhandleuaprxforward function in the drivers/net/wireless/marvell/mwifiex/uaptxrx.c file of the Marvell wireless adapter driver in the Linux operating system kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability in the function ath11k_dp_rx_mon_deliver() of the drivers/net/wireless/ath/ath11k/dp_rx.c file, a driver for Atheros/Qualcomm wireless adapter devices in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath11kdprxmondeliver function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability in the function ath10k_core_start_recovery() of the drivers/net/wireless/ath/ath10k/core.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the ath10kcorestartrecovery function in the drivers/net/wireless/ath/ath10k/core.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an...
PT-2026-1324
Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor Exynos 1380 Samsung Mobile Processor Exynos 1480 Samsung Mobile Processor Exynos 2400 Samsung Mobile Processor Exynos 1580 Description An improper handling of the NL80211 vendor command results in a buffer overflow whe...
CVE-2022-50880 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: add peer map clean up for peer delete in ath10kstastate When peer delete failed in a disconnect operation, use-after-free detected by KFENCE in below log. It is because for each vdevid and address, it has only one...
Vulnerability of the iwl_mvm_mac_remove_interface() function in the drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c module – This driver is part of the Intel wireless adapter support in Linux operating systems. It can be exploited by attackers to cause service interruptions.
The vulnerability of the iwlmvmmacremoveinterface function in the drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c module of the Linux operating system’s wireless adapter driver leads to the failure to release resources after their useful life has ended. Exploiting this vulnerability can allow a...
CVE-2023-53180
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid NULL pointer access during management transmit cleanup Currently 'ar' reference is not added in skbcb. Though this is generally not used during transmit completion callbacks, on interface removal the remaining...
ath11k: Fix frames flush failure caused by deadlock
...
Vulnerability of the mt7615_coredump_work() function in the drivers/net/wireless/mediatek/mt76/mt7615/mac.c module – This driver is responsible for supporting wireless communication adapters in the Linux operating system. An attacker can exploit this vulnerability to gain access to protected information.
Vulnerability of the mt7615coredumpwork function in the drivers/net/wireless/mediatek/mt76/mt7615/mac.c module – The driver for supporting kernel-level wireless adapters in the Linux operating system is vulnerable due to improper memory release before deleting the last reference memory leak...
The vulnerability of the ath12k_dp_free() function in the driver drivers/net/wireless/ath/ath12k/dp.c, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath12kdpfree function in the drivers/net/wireless/ath/ath12k/dp.c file, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, involves re-liberating memory that has already been freed. Exploiting this vulnerability could allow an...
kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphywork before freeing wiphy A wiphywork can be queued from the moment the wiphy is allocated and initialized i.e. wiphynewnm. When a wiphywork is queued, the rdev::wiphywork is getting queued. If wiphyfr...
Vulnerability of the mt7921pci_suspend() function in the drivers/net/wireless/mediatek/mt76/mt7921/pci.c module – This driver provides support for wireless communication adapters in the Linux operating system. It can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the mt7921pcisuspend function in the drivers/net/wireless/mediatek/mt76/mt7921/pci.c module – The driver for supporting wireless connection adapters in the Linux operating system contains errors in its code. Exploiting this vulnerability could allow an attacker to compromise the...