CVE-2024-33057 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...

kernel: wifi: mac80211: fix potential sta-link leak

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet e.g. during connection to an AP MLD, we might remove the station without ever marking links valid, and leak them. F...

CVE-2024-21457

INformation disclosure while handling Multi-link IE in beacon frame...

CVE-2024-21457 Buffer Over-read in WLAN Host Communication

INformation disclosure while handling Multi-link IE in beacon frame...

CVE-2024-21457 Buffer Over-read in WLAN Host Communication

INformation disclosure while handling Multi-link IE in beacon frame...

PT-2024-18881 · Qualcomm · Snapdragon +105

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns information disclosure when handling Multi-link IE in a beacon frame. No details are provided about the estimated number of potential...

DEBIAN-CVE-2024-35838

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet e.g. during connection to an AP MLD, we might remove the station without ever marking links valid, and leak them. F...

PT-2024-13126 · Qualcomm · Snapdragon +131

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while parsing a beacon or probe response frame. This happens when an Access Point AP sends more support...

kernel: wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO

A NULL pointer dereference vulnerability was found in the Intel iwlwifi wireless driver in the Linux kernel. When using Multi-Link Operation MLO mode, the iwlmvmmaxamsdusize function incorrectly accesses vif-bssconf.chandef.chan-band, which leads to a NULL pointer dereference because bssconf is n...

kernel: wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO

A NULL pointer dereference vulnerability was found in the Intel iwlwifi wireless driver in the Linux kernel. When using Multi-Link Operation MLO mode, the iwlmvmmaxamsdusize function incorrectly accesses vif-bssconf.chandef.chan-band, which leads to a NULL pointer dereference because bssconf is n...

CVE-2023-33016

Transient DOS in WLAN firmware while parsing MLO multi-link operation...

CVE-2023-33016

CVE-2023-33016 corresponds to a transient Denial of Service affecting Qualcomm WLAN firmware during parsing of MLO (multi-link operation). Several sources label the issue as a Buffer Over-read in WLAN firmware with a base CVSS v3.1 score of 7.5 (Network attack, no user interaction, low attack com...

CVE-2023-33016 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN firmware while parsing MLO multi-link operation...

PT-2023-24139 · Qualcomm · Qualcomm Sr8811

Name of the Vulnerable Software and Affected Versions: Qualcomm SR8811 affected versions not specified Description: The issue is related to a transient DOS in WLAN firmware while parsing MLO multi-link operation. Recommendations: At the moment, there is no information about a newer version that...