103 matches found
CVE-2025-37973: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation Currently during the multi-link element defragmentation process, the multi-link element length added to the total IEs length when calculating the...
PT-2025-22234
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified, related to out-of-bounds access during multi-link element defragmentation in the cfg80211 module. The problem occurs when calculating the...
CVE-2024-33057
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
A flaw was found in the Linux kernel's extended Berkeley Packet Filter eBPF subsystem. A privileged local attacker, with CAPSYSADMIN capabilities or root access, could exploit a use-after-free vulnerability in the bpfuprobemultilinkattach function. This issue arises when bpflinkprime fails, leadi...
bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
...
The vulnerability of the bpf_uprobe_multi_link_attach() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the bpfuprobemultilinkattach function in the kernel/trace/bpfTrace.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
PT-2024-7580
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to a use-after-free vulnerability in the bpf uprobe multi link attach function. If bpf link prime fails, bpf uprobe multi link attach frees the array of bpf uprobes without...
CVE-2024-33057
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
CVE-2024-33057 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
CVE-2024-33057 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...
kernel: wifi: mac80211: fix potential sta-link leak
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet e.g. during connection to an AP MLD, we might remove the station without ever marking links valid, and leak them. F...
CVE-2024-21457
INformation disclosure while handling Multi-link IE in beacon frame...
CVE-2024-21457 Buffer Over-read in WLAN Host Communication
INformation disclosure while handling Multi-link IE in beacon frame...
CVE-2024-21457 Buffer Over-read in WLAN Host Communication
INformation disclosure while handling Multi-link IE in beacon frame...
PT-2024-18881 · Qualcomm · Snapdragon +105
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns information disclosure when handling Multi-link IE in a beacon frame. No details are provided about the estimated number of potential...
DEBIAN-CVE-2024-35838
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet e.g. during connection to an AP MLD, we might remove the station without ever marking links valid, and leak them. F...
PT-2024-13126 · Qualcomm · Snapdragon +131
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while parsing a beacon or probe response frame. This happens when an Access Point AP sends more support...
kernel: wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO
A NULL pointer dereference vulnerability was found in the Intel iwlwifi wireless driver in the Linux kernel. When using Multi-Link Operation MLO mode, the iwlmvmmaxamsdusize function incorrectly accesses vif-bssconf.chandef.chan-band, which leads to a NULL pointer dereference because bssconf is n...
kernel: wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO
A NULL pointer dereference vulnerability was found in the Intel iwlwifi wireless driver in the Linux kernel. When using Multi-Link Operation MLO mode, the iwlmvmmaxamsdusize function incorrectly accesses vif-bssconf.chandef.chan-band, which leads to a NULL pointer dereference because bssconf is n...