Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Check the A-MSDU format more carefully. If it seems that there is another subframe within the A-MSDU, but the header is not fully present, we may end up reading data outside its expected range, which would then ne...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: nl80211: Fix for “NL80211ATTRMLOLINKID off-by-one” issue. Since the validation of the netlink attribute range includes inclusive checking, the maximum value of the attribute NL80211ATTRMLOLINKID should be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mvm: Avoid NULL pointer dereferencing The functions iwlmvmtxskbsta and iwlmvmtxmpdu check that the mvmvsta pointer is not NULL. They retrieve this pointer using iwlmvmstafrommac80211, which dereferences the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: ar5523: Proper endpoint verification should be enabled. Syzkaller reports that 1 encountered a warning regarding an endpoint in use that does not have the expected type. This issue can be fixed by checking the existence of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: iwlegacy: Clear stale interrupts before resuming the device. The iwl4965 driver fails when resuming from hibernation on my laptop. The reason seems to be that stale interrupts are not cleared before interrupts are enable...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: nl80211 – Set special AP channel widths to disallowed. Setting the AP channel width is intended for use with the standard 20/40/… MHz channel width progression. Switching between narrow channels in S1G mode is not supported...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211: Set correct chandef when starting CAC When starting CAC in a mode other than AP mode, it returns a “WARNING: CPU: 0 PID: 63 at cfg80211chandefdfsusable+0x20/0xaf cfg80211” message caused by the chandef.chan being...

PT-2025-6668 · Intel · Intel Proset/Wireless Wifi +1

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi and Killer WiFi software for Windows versions prior to 23.80 Description: The issue is related to improper input validation in some IntelR PROSet/Wireless WiFi and Killer WiFi software for Windows, which may allow ...

PT-2025-6676 · Intel · Intel Proset/Wireless Wifi +1

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi and Killer WiFi software for Windows versions prior to 23.80 Description: The issue is related to a stack-based buffer overflow that may allow an unauthenticated user to potentially enable denial of service via...

PT-2025-16663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the wifi ath11k driver. The issue occurs while processing the monitor destination ring, where the driver may fail to...

Intel® PROSet/Wireless WiFi and Killer™ WiFi Advisory

Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Killer™ WiFi software products may allow information disclosure or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...

PT-2025-6665 · Intel · Intel Proset/Wireless Wifi +1

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi and Killer WiFi software for Windows versions prior to 23.80 Description: The issue is related to a NULL pointer dereference in some IntelR PROSet/Wireless WiFi and Killer WiFi software for Windows. This may allow ...

Intel PROSet/Wireless WiFi and Killer WiFi Advisory - Lenovo Support US

No description provided...

CVE-2024-46432

Tenda W18E V16.01.0.81625 is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function, which allows unauthorized changes to WiFi configuration settings and administrative credentials...

CVE-2024-46432

Tenda W18E V16.01.0.81625 is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function, which allows unauthorized changes to WiFi configuration settings and administrative credentials...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47713)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47713 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb...

CVE-2024-46432

Tenda W18E V16.01.0.81625 is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function, which allows unauthorized changes to WiFi configuration settings and administrative credentials...

CVE-2024-46437

A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.81625 web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a special...

CVE-2024-46432

Summary (CVE-2024-46432) : Tenda W18E router (version 16.01.0.8(1625)) is affected by an Incorrect Access Control vulnerability in the SetQuickcfgWifiAndDlogin/setQuickCfgWifiAndLogin function, allowing an attacker to issue a crafted HTTP POST and make unauthorized changes to WiFi configuration a...

CVE-2024-46437

The CVE-2024-46437 entry concerns the Tenda W18E web management portal (V16.01.0.8(1625)). A vulnerability in the getQuickCfgWifiAndLogin function allows an unauthenticated attacker to retrieve sensitive configuration data (WiFi SSID, WiFi password, and base64-encoded administrator credentials) v...