CVE-2023-52611 wifi: rtw88: sdio: Honor the host max_req_size in the RX path

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: sdio: Honor the host maxreqsize in the RX path Lukas reports skboverpanic errors on his Banana Pi BPI-CM4 which comes with an Amlogic A311D G12B SoC and a RTL8822CS SDIO wifi/Bluetooth combo card. The error he observ...

CVE-2023-52611

CVE-2023-52611 (Linux kernel, wifi: rtw88 SDIO): Fixes address skb_over_panic by ensuring the driver can receive more than 1536 bytes from the SDIO card. Root causes include an Amlogic A311D (G12B) SDIO controller hardware bug (DMA transfers blocked; uses SRAM up to 1536 bytes) and rtw88 not spli...

CVE-2023-52611: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: sdio: Honor the host maxreqsize in the RX path Lukas reports skboverpanic errors on his Banana Pi BPI-CM4 which comes with an Amlogic A311D G12B SoC and a RTL8822CS SDIO wifi/Bluetooth combo card. The error he observ...

PT-2023-36486

Уязвимость функции rtw sdio get tx addr модуля drivers/net/wireless/realtek/rtw88/sdio.c - драйвера поддержки адаптеров беспроводной связи Realtek ядра операционной системы Linux связана с отсутствием контроля размера запрашиваемого буфера. Эксплуатация уязвимости может позволить нарушителю вызва...

PT-2024-14653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the wifi: rtw88: sdio: Honor the host max req size in the RX path. Lukas reported skb over panic errors on his Banana Pi BPI-CM4, which comes with an Amlogic A311...

kernel: wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host SDIO may need addtional 511 bytes to align bus operation. If the tailroom of this skb is not big enough, we would access invalid memory region. For low level...

PT-2025-49645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the mt76 and mt7921 components related to SDIO header handling. Specifically, the mt7921 usb sdio tx prepare skb function does not adequately ensu...

USN-6186-1: Linux kernel vulnerabilities

Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrar...

USN-6175-1: Linux kernel vulnerabilities

Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrar...

PT-2025-40707

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the brcmfmac module where the probe function may receive a NULL id argument. This can occur during device reprobing after power management...

USN-6033-1: Linux kernel (OEM) vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...

CVE-2023-1989

A use-after-free flaw was found in btsdioremove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdioremove with an unfinished job may cause a race problem which leads to a UAF on hdev devices. Mitigation This flaw can be mitigated by preventing the affected Generic Bluetooth SDIO...

GSD-2023-1002419 mmc: sdio: fix possible resource leaks in some error paths

mmc: sdio: fix possible resource leaks in some error paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.306 by commit...

GSD-2023-1002400 mmc: sdio: fix possible resource leaks in some error paths

mmc: sdio: fix possible resource leaks in some error paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.232 by commit...

GSD-2023-1002380 mmc: sdio: fix possible resource leaks in some error paths

mmc: sdio: fix possible resource leaks in some error paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.169 by commit...

GSD-2023-1002351 mmc: sdio: fix possible resource leaks in some error paths

mmc: sdio: fix possible resource leaks in some error paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.95 by commit...

PT-2023-35455 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.169 Description: The issue is related to possible resource leaks in some error paths in the mmc: sdio component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-35487

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.33 through 4.19.272 Description The issue is related to possible resource leaks in error paths in the mmc: sdio component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-35494

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.306 Description The issue is related to possible resource leaks in some error paths in the mmc: sdio component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-35475

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.232 Description The issue is related to possible resource leaks in some error paths in the mmc: sdio component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...