PT-2022-35655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220 Description The issue concerns erroneous memory clean-up loops in the vt6655 staging driver. It was introduced in version v4.18 and fixed in version v5.4.220. The actual impact and attack plausibility ha...

PT-2022-35316

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description The issue concerns erroneous memory clean-up loops in the vt6655 staging driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

GSD-2022-1003666 staging: rtl8712: fix uninit-value in r871xu_drv_init()

staging: rtl8712: fix uninit-value in r871xudrvinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003220 drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()

drivers: staging: rtl8723bs: Fix deadlock in rtwsurveydoneeventcallback This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1003211 drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()

drivers: staging: rtl8192e: Fix deadlock in rtllibbeaconsstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1002907 drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle()

drivers: staging: rtl8192bs: Fix deadlock in rtwjoinbsseventprehandle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002558 drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()

drivers: staging: rtl8192e: Fix deadlock in rtllibbeaconsstop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002544 drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle

drivers: staging: rtl8192eu: Fix deadlock in rtwjoinbsseventprehandle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2021-1002298 staging: rtl8723bs: remove possible deadlock when disconnect (v2)

staging: rtl8723bs: remove possible deadlock when disconnect v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases CVE IDs are not normally used for drivers/staging/* (unfinished work); however system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.

...

AZL-6536 CVE-2021-28660 affecting package kernel for versions less than 5.10.78.1-1

rtwwxsetscan in drivers/staging/rtl8188eu/osdep/ioctllinux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the -ssid array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/ unfinished work; however, system integrators may...

DEBIAN-CVE-2021-28660

rtwwxsetscan in drivers/staging/rtl8188eu/osdep/ioctllinux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the -ssid array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/ unfinished work; however, system integrators may...