Astra Linux – Vulnerability in Linux 5.10, Linux

In rndisqueryoid in drivers/net/wireless/rndiswlan.c within the Linux kernel, from version 6.1.5 onwards, there is an integer overflow in a mathematical operation...

CVE-2023-23559

An integer overflow flaw was found in the Linux kernel’s wireless RNDIS USB device driver in how a user installs a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system...

PT-2023-1166

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.1.5 Description The issue is related to an integer overflow in the rndis query oid function in the drivers/net/wireless/rndis wlan.c file of the Linux kernel. This overflow occurs during an addition operation...