kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12kdprxpeerfragsetup. This could lead to out-of-bounds access in peer-rxtid...

CVE-2025-58283

Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality...

Tenda AC20 sscanf function buffer overflow vulnerability

Tenda AC20 is a home router from Tenda. The Tenda AC20 suffers from a buffer overflow vulnerability, which originates from the incorrect operation of the sscanf function parameter timeZone in the file /goform/fastsettingwifiset, for which no detailed vulnerability details are available at this ti...

Linux Distros Unpatched Vulnerability : CVE-2025-39957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: increase scanieslen for S1G Currently the S1G capability element is not taken into account for the scanieslen, which leads to a buffer length...

ALSA-2025:17776 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: core: Harden s32ton against conversion to 0 bits CVE-2025-38556 kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling CVE-2025-39761 kernel: ALSA: usb-audio:...

Linux Distros Unpatched Vulnerability : CVE-2023-53679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt7601u: fix an integer underflow Fix an integer underflow that leads to a null pointer dereference in 'mt7601urxskbfromseg'. The variable 'dmalen' in the...

OESA-2025-2406 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in ofgetddrtimings We should add the ofnodeput when breaking out of foreachchildofnode as it will automatically increase and...

EUVD-2025-33809

Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58283

Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58283

Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58283

CVE-2025-58283 affects Huawei HarmonyOS (Wi‑Fi module). The vulnerability is a privilege control issue in the Wi‑Fi module that enables local exploitation with low complexity to impact service confidentiality. Exploitation conditions: local access, low privileges, no user interaction required in ...

PT-2025-43398

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.06.50 Description The Tenda AC6 version 15.03.06.50 contains a stack overflow issue in the ssid parameter within the fast setting wifi set function. This allows attackers to potentially cause a Denial of Service DoS by...

PT-2025-41635

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A permission control issue exists in the Wi-Fi module. Successful exploitation could impact service confidentiality. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-11549

A vulnerability has been found in Tenda W12 3.0.0.63948. The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out...

wifi: mac80211: increase scan_ies_len for S1G

...

CVE-2025-11526

A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation of the argument wifichkHz results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

SUSE CVE-2025-39957

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: increase scanieslen for S1G Currently the S1G capability element is not taken into account for the scanieslen, which leads to a buffer length validation failure in ieee80211prephwscan and subsequent WARN in...

EUVD-2025-33407

A vulnerability has been found in Tenda W12 3.0.0.63948. The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out...

CVE-2025-11550

A vulnerability was found in Tenda W12 3.0.0.63948. The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in null pointer dereference. The attack may be performed from...