99 matches found
CVE-2019-15098
drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor...
CVE-2019-15099: NULL Pointer Dereference
drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor...
CVE-2019-15098: NULL Pointer Dereference
drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor...
PT-2019-3230
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.9 Description The issue is related to a driver error in the Linux kernel, specifically in the drivers/net/wireless/ath/ath6kl/usb.c file, which is associated with NULL pointer dereference errors. This can be...
PT-2019-3229
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.8 Description The issue is related to a driver error in the Linux kernel, specifically in the drivers/net/wireless/ath/ath10k/usb.c file, which is associated with null pointer dereference errors. An attacker,...
CVE-2012-6712: Improper Restriction of Operations within the Bounds of a Memory Buffer
In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory corruption...
CVE-2019-10126
A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiexuapparsetailies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences...
CVE-2018-14856: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...
Memory corruption
Memory leak in the hwsimnewradionl function in drivers/net/wireless/mac80211hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service memory consumption by triggering an out-of-array error case...
CVE-2018-8087
Memory leak in the hwsimnewradionl function in drivers/net/wireless/mac80211hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service memory consumption by triggering an out-of-array error case...
CVE-2018-8087
Memory leak in the hwsimnewradionl function in drivers/net/wireless/mac80211hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service memory consumption by triggering an out-of-array error case...
CVE-2018-8087: Missing Release of Resource after Effective Lifetime
Memory leak in the hwsimnewradionl function in drivers/net/wireless/mac80211hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service memory consumption by triggering an out-of-array error case...
CVE-2016-5342: Out-of-bounds Write
Heap-based buffer overflow in the wcnsswlanwrite function in drivers/net/wireless/wcnss/wcnsswlan.c in the wcnsswlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of...
Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3043)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3043 advisory. - fix autofs/afs/etc. magic mountpoint breakage Al Viro Orabug: 19028505 CVE-2014-0203 - SELinux: Fix kernel BUG on empty security contexts. Stephe...
CVE-2013-4579: Undefined Security Weakness
The ath9khtcsetbssidmask function in drivers/net/wireless/ath/ath9k/htcdrvmain.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after...
CVE-2013-2852: Use of Externally-Controlled Format String
Format string vulnerability in the b43requestfirmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe...
CVE-2010-4648
The orinocoioctlsetauth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames...
CVE-2011-3359
The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...
CVE-2011-3359: Improper Restriction of Operations within the Bounds of a Memory Buffer
The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...