Atheros Qualcomm Wireless Driver Buffer Overflow

The vulnerability of the ar5523cmd function in the drivers/net/wireless/ath/ar5523/ar5523.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

ath12k_htt_print_tx_selfgen_ac_stats_tlv Heap Buffer Overflow DoS

Vulnerability of the ath12khttprinttxselfgenacstatstlv function in the drivers/net/wireless/ath/ath12k/debugfshttstats.c module – The Linux operating system’s Atheros/Qualcomm wireless adapter support driver relies on buffer overflow attacks. Exploiting this vulnerability can allow attackers to...

Marvell wireless driver Heap Buffer Overflow DoS

The vulnerability of the mwifiexhandleuaprxforward function in the drivers/net/wireless/marvell/mwifiex/uaptxrx.c file of the Marvell wireless adapter driver in the Linux operating system kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

ath11k_spectral_scan_config() Function DoS

The vulnerability of the ath11kspectralscanconfig function in the drivers/net/wireless/ath/ath11k/spectral.c module – the driver for Atheros/Qualcomm wireless adapter support in Linux operating systems – is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath10kcorestartrecovery function in the drivers/net/wireless/ath/ath10k/core.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an...

CVE-2022-50880 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: add peer map clean up for peer delete in ath10kstastate When peer delete failed in a disconnect operation, use-after-free detected by KFENCE in below log. It is because for each vdevid and address, it has only one...

Intel wireless driver Heap Buffer Overflow DoS

The vulnerability of the iwlmvmmacremoveinterface function in the drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c module of the Linux operating system’s wireless adapter driver leads to the failure to release resources after their useful life has ended. Exploiting this vulnerability can allow a...

mt7915_getPhyMode Heap Buffer Overflow DoS

The vulnerability of the mt7915getPhyMode function in the drivers/net/wireless/mediatek/mt76/mt7915/mcu.c file of the wireless adapter support driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

ath11k: Fix frames flush failure caused by deadlock

...

mt7615_coredump_work Heap Buffer Overflow

Vulnerability of the mt7615coredumpwork function in the drivers/net/wireless/mediatek/mt76/mt7615/mac.c module – The driver for supporting kernel-level wireless adapters in the Linux operating system is vulnerable due to improper memory release before deleting the last reference memory leak...

Atheros Wireless Driver Heap Buffer Overflow

The vulnerability of the ath12kdpfree function in the drivers/net/wireless/ath/ath12k/dp.c file, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, involves re-liberating memory that has already been freed. Exploiting this vulnerability could allow an...

mt7921pci_suspend() Heap Buffer Overflow DoS

Vulnerability of the mt7921pcisuspend function in the drivers/net/wireless/mediatek/mt76/mt7921/pci.c module – The driver for supporting wireless connection adapters in the Linux operating system contains errors in its code. Exploiting this vulnerability could allow an attacker to compromise the...

rtw89_ops CancelHWScan() function Heap Buffer Overflow

Vulnerability of the rtw89ops CancelHWScan function in the drivers/net/wireless/realtek/rtw89/mac80211.c file – The drivers for Realtek wireless adapter support in Linux operating systems are vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow ...