The vulnerability of the mt7601u_rx_next_seg_len() function in the drivers/net/wireless/mediatek/mt7601u/dma.c module of the wireless adapter driver for Mediatek’s Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt7601urxnextseglen function in the drivers/net/wireless/mediatek/mt7601u/dma.c module of the Mediatek wireless adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

SUSE CVE-2020-12465

An array overflow was discovered in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages...

PT-2022-37975

Уязвимость функции bam alloc chan модуля drivers/dma/qcom/bam dma.c драйвера поддержки движка DMA ядра операционной системы Linux связана с раскрытием конфиденциальной информации. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2020-12465: Buffer Copy without Checking Size of Input

An array overflow was discovered in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages...

CVE-2011-3359: Improper Restriction of Operations within the Bounds of a Memory Buffer

The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...