CVE-2023-53180

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid NULL pointer access during management transmit cleanup Currently 'ar' reference is not added in skbcb. Though this is generally not used during transmit completion callbacks, on interface removal the remaining...

ath11k: Fix frames flush failure caused by deadlock

...

mt7615_coredump_work Heap Buffer Overflow

Vulnerability of the mt7615coredumpwork function in the drivers/net/wireless/mediatek/mt76/mt7615/mac.c module – The driver for supporting kernel-level wireless adapters in the Linux operating system is vulnerable due to improper memory release before deleting the last reference memory leak...

Atheros Wireless Driver Heap Buffer Overflow

The vulnerability of the ath12kdpfree function in the drivers/net/wireless/ath/ath12k/dp.c file, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, involves re-liberating memory that has already been freed. Exploiting this vulnerability could allow an...

kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphywork before freeing wiphy A wiphywork can be queued from the moment the wiphy is allocated and initialized i.e. wiphynewnm. When a wiphywork is queued, the rdev::wiphywork is getting queued. If wiphyfr...

mt7921pci_suspend() Heap Buffer Overflow DoS

Vulnerability of the mt7921pcisuspend function in the drivers/net/wireless/mediatek/mt76/mt7921/pci.c module – The driver for supporting wireless connection adapters in the Linux operating system contains errors in its code. Exploiting this vulnerability could allow an attacker to compromise the...

rtw89_ops CancelHWScan() function Heap Buffer Overflow

Vulnerability of the rtw89ops CancelHWScan function in the drivers/net/wireless/realtek/rtw89/mac80211.c file – The drivers for Realtek wireless adapter support in Linux operating systems are vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow ...

cfg80211 Component Privilege Escalation

The vulnerability of DRM/LIMA components in the Linux operating system is related to the state of the competition. Exploiting this vulnerability can allow a hacker to increase their privileges within the system...

AZL-50930 CVE-2024-47738 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't use rate mask for offchannel TX either Like the commit ab9177d83c04 "wifi: mac80211: don't use rate mask for scanning", ignore incorrect settings to avoid no supported rate warning reported by syzbot. The...

Linux kernel wireless Heap Buffer Overflow DoS

The vulnerability of the mac802154llseckeydel function in the net/mac802154/llsec.c module of the Linux kernel’s wireless subsystem is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of...

linux-wless.passys.nl Cross Site Scripting vulnerability OBB-3827665

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

LinSSID - Graphical wireless scanning for Linux (similar to Inssider)

LinSSID is graphically and functionally similar to Inssider Microsoft™ Windows®. It is written in C++ using Linux wireless tools, Qt5, and Qwt 6.1. LinSSID may be installed either by downloading source or binary from this site, or if you're using Debian/Ubuntu or one of its brethren, adding a ppa...