UBUNTU-CVE-2023-53028

In the Linux kernel, the following vulnerability has been resolved: Revert "wifi: mac80211: fix memory leak in ieee80211ifadd" This reverts commit 13e5afd3d773c6fc6ca2b89027befaaaa1ea7293. ieee80211iffree is already called from freenetdevndev because ndev-privdestructor == ieee80211iffree syzbot...

CVE-2023-53028

CVE-2023-53028 (Linux kernel) affects the mac80211 wireless stack. The issue stems from a memory-leak fix in ieee80211_if_add() that was reverted, with ieee80211_if_free() already invoked from free_netdev(ndev) when ndev->priv_destructor == ieee80211_if_free. The provided exploit/debug traces ...

The vulnerability of the Linux operating system’s kernel WiFi component, which allows a hacker to trigger a service failure

The vulnerability of the mt7996mcustabfertlv function in the Linux kernel’s Wi-Fi component is related to memory-read errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Linux operating system’s kernel WiFi component, which allows a hacker to trigger a service failure

The vulnerability of the ieee80211dostop function in the Linux kernel’s Wi-Fi component is related to improper locking mechanisms. Exploiting this vulnerability could allow a attacker to trigger a service failure...

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the iwlmvmstopdevice function in the Linux kernel’s Wi-Fi component is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the iwl_mvm_mfu_assert_dump_notif() function in the Linux kernel’s Wi-Fi component allows a hacker to trigger a service failure.

The vulnerability of the iwlmvmmfuassertdumpnotif function in the Linux kernel’s Wi-Fi component is related to memory corruption. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel WiFi component, which allows a hacker to increase their privileges within the system

The vulnerability of the wilcparsejoinbssparam function in the Linux kernel-based WiFi component is related to errors that occur after deallocation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

The vulnerability of the mesh_path_discard_frame() function in the Linux kernel’s Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the meshpathdiscardframe function in the Linux kernel’s Wi-Fi component is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-2201: Fixed information leak in x86/BHI bsc1217339. CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers bsc1228483. CVE-2024-42098:...

PT-2025-27974

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the wifi: ath12k module. The issue occurs due to multiple allocations of rx stats when the same station is...

H3C多款产品 安全漏洞

H3C Magic NX30 Pro and others are products of China's Xinhua San H3C.H3C Magic NX30 Pro is a home router that supports WiFi6 3000M rate.H3C Magic NX15 is a router.H3C Magic NX400 is a router. A security vulnerability exists in several H3C products. The vulnerability stems from a command injection...

The vulnerability of the setWiFiScheduleCfg() function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the eHour parameter. Exploiting...

The vulnerability of the setWiFiScheduleCfg() function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the sMinute parameter. Exploiti...

Tenda RX3 SetPptpServerCfg Buffer Overflow Vulnerability

Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. The Tenda RX3 suffers from a SetPptpServerCfg buffer overflow vulnerability, which originates from the startIp and endIp parameters in...

PT-2025-29014

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's wifi subsystem, specifically within the ath12k driver. A null access issue occurs in the assign channel context handler when ath12k mac assign vif t...

The vulnerability of the iwlreq_fw_callback() function in the drivers/net/wireless/intel/iwlwifi/iwl-drv.c file of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the iwlreqfwcallback function in the drivers/net/wireless/intel/iwlwifi/iwl-drv.c file of the Linux kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-29217

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2025-29218

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...