107 matches found
ROS-20260929-73-0104
The vulnerability of the lbsfreeadapter function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, an...
The vulnerability in the net/wireless/mlme.c module of Linux kernel allows a hacker to cause a service failure.
The vulnerability in the net/wireless/mlme.c module of Linux operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the cfg80211_sme_connect() function in the net/wireless/sme.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cfg80211smeconnect function in the net/wireless/sme.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows a attacker to cause a service failure...
The vulnerability of the cfg80211_6ghz_power_type_valid() function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, allows a hacker to cause a service failure.
The vulnerability of the cfg802116ghzpowertypevalid function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, is related to incorrect data validation. Exploiting this vulnerability could allow an attacker to cause service failures...
ROS-20260120-7326
A vulnerability in the isanalpha2 function net/wireless/reg.c of the Linux operating system kernel is related to insufficient blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002982)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002982 advisory. An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsimac80211detach in the file...
CVE-2022-50551: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwallocrequest This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BITchiprev when a 'chiprev' provided by the device is too large. It should also not be equ...
CVE-2023-53460: Missing Release of Memory after Effective Lifetime
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix memory leak in rtwusbprobe drivers/net/wireless/realtek/rtw88/usb.c:876 rtwusbprobe warn: 'hw' from ieee80211allochw not released on lines: 811 Fix this by modifying return to a goto statement...
Vulnerability of the is_an_alpha2() function (net/wireless/reg.c) in the Linux operating system’s kernel, allowing a hacker to cause a service failure
The vulnerability of the isanalpha2 function net/wireless/reg.c in the Linux operating system is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2022-49503: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix potential out of bounds access with invalid rxstatus-rskeyix The "rxstatus-rskeyix" eventually gets passed to testbit so we need to ensure that it is within the bitmap. drivers/net/wireless/ath/ath9k/common.c:46...
PT-2024-41809
Уязвимость функции ath12k htt print tx selfgen ac stats tlv модуля drivers/net/wireless/ath/ath12k/debugfs htt stats.c - драйвера поддержки адаптеров беспроводной связи Atheros/Qualcomm ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить...
PT-2024-41573
Уязвимость функции iwl mvm mac remove interface модуля drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c - драйвера поддержки адаптеров беспроводной связи Intel ядра операционной системы Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатац...
PT-2024-10037
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.61 Description The issue is related to the cfg80211 unregister wdev function in the Linux kernel's net/wireless/core.c module, which is associated with a double-free vulnerability. This vulnerability can be...
CVE-2024-43879
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: handle 2x996 RU allocation in cfg80211calculatebitratehe Currently NL80211RATEINFOHERUALLOC2x996 is not handled in cfg80211calculatebitratehe, leading to below warning: kernel: invalid HE MCS: bw:6, ru:6 kernel:...
CVE-2024-43879
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: handle 2x996 RU allocation in cfg80211calculatebitratehe Currently NL80211RATEINFOHERUALLOC2x996 is not handled in cfg80211calculatebitratehe, leading to below warning: kernel: invalid HE MCS: bw:6, ru:6 kernel:...
kernel: wifi: nl80211: don't free NULL coalescing rule
A possible NULL pointer dereference was observed in the Linux kernel, in net/wireless/nl80211.c. This may lead to a crash...
kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if ieee80211gettxpower returns the INTMIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in...
CVE-2024-38616: Uncontrolled Resource Consumption
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: re-fix fortified-memset warning The carl9170txrelease function sometimes triggers a fortified-memset warning in my randconfig builds: In file included from include/linux/string.h:254, from...
CVE-2023-52832
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if ieee80211gettxpower returns the INTMIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in...
CVE-2023-52832 wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if ieee80211gettxpower returns the INTMIN value mac80211 internally uses for "unset power level". UBSAN: signed-integer-overflow in...