Tenda FH1205 Buffer Overflow Vulnerability

The tenda FH1205 is a dual-band wireless router for home users with a high price/performance ratio and stable network performance. A buffer overflow vulnerability exists in the Tenda FH1205 version 2.0.0.7. The vulnerability affects the fromadvsetlanip function in the /goform/AdvSetLanip file, an...

COROS PACE 3 安全漏洞

COROS PACE 3 is a GPS sports watch from COROS China. A security vulnerability exists in COROS PACE 3 3.0808.0 and earlier versions, which originates from unencrypted WLAN communication and could lead to a man-in-the-middle attack...

SUSE CVE-2022-50164

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double listadd at iwlmvmmacwaketxqueue After successfull station association, if station queues are disabled for some reason, the related lists are not emptied. So if some new element is added to the list ...

SUSE CVE-2022-50179

In the Linux kernel, the following vulnerability has been resolved: ath9k: fix use-after-free in ath9khifusbrxcb Syzbot reported use-after-free Read in ath9khifusbrxcb 0. The problem was in incorrect htchandle-drvpriv initialization. Probable call trace which can trigger use-after-free:...

The vulnerability of the ath12k_dp_free() function in the driver drivers/net/wireless/ath/ath12k/dp.c, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath12kdpfree function in the drivers/net/wireless/ath/ath12k/dp.c file, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, involves re-liberating memory that has already been freed. Exploiting this vulnerability could allow an...

Centre Driven Controlled Evolution of Wireless Virtual Networks Based on Broadcast Tokens

In a wireless sensor network, the virtual connectivity between nodes is a function of the keys shared between various nodes. Pre-embedding these key configurations in the nodes would make the network inflexible. On the other hand, permitting subsets of nodes to engage in a common key synthesis...

DEBIAN-CVE-2022-50179

In the Linux kernel, the following vulnerability has been resolved: ath9k: fix use-after-free in ath9khifusbrxcb Syzbot reported use-after-free Read in ath9khifusbrxcb 0. The problem was in incorrect htchandle-drvpriv initialization. Probable call trace which can trigger use-after-free:...

DEBIAN-CVE-2022-49942

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not connected to a channel, sending channel "switch" announcement doesn't make any sense. The BSS list is empty in that case. This causes the fo...

UBUNTU-CVE-2022-50164

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double listadd at iwlmvmmacwaketxqueue After successfull station association, if station queues are disabled for some reason, the related lists are not emptied. So if some new element is added to the list ...

UBUNTU-CVE-2022-49942

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not connected to a channel, sending channel "switch" announcement doesn't make any sense. The BSS list is empty in that case. This causes the fo...

CVE-2022-50178

The CVE-2022-50178 issue is in Linux kernel wifi support for rtw89 (8852a) where a negative RF calibration result in the DPK could trigger a divisor-by-zero and a core dump. The root cause is division in the calibration logic; the fix guards division by zero by having phy_div() perform division o...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect sequence of debug actions in the wifi driver that causes the device to crash...

KAON KCM3100 安全漏洞

KAON KCM3100 is a WiFi device from KAON Japan. A security vulnerability exists in KAON KCM3100 Ver1.4.2 and earlier versions, which stems from an authentication bypass that could lead to unauthorized access...

TP-LINK TL-WR940N 安全漏洞

TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR940N V4 version, which originates from a buffer overflow due to the operation of the dnsserver1 parameter in the /userRpm/WanSlaacCfgRpm.htm file...

Weak Password Storage Vulnerability in Various ABB Products

ABB ASPECT is a scalable building energy management and control solution.ABB MATRIX is an embedded building automation network controller.ABB NEXUS is a wireless and wired solution. A weak password storage vulnerability exists in several ABB products, which can be exploited by an attacker to caus...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: wifi: rtw89: avoid initiating the mgntentry list twice when WoWLAN fails If WoWLAN fails during the resume process, the rtw89opsaddinterface function is triggered without first removing the interface. As a result, the mgntentr...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: wifi: cfg80211: tests: Fixed a potential NULL dereference in testcfg80211ParseColocatedAp. kunitkzalloc may return NULL. Dereferencing it without a NULL check may lead to a NULL dereference. Added a NULL check for ies...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: regulatory: improve invalid hints checking Syzbot continues to report a issue 1 that occurs when erroneous symbols sent from userspace get through into useralpha2 via the regulatoryhintuser call. Such invalid...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k – Fix for node corruption in the “ar-arvifs” list In the current WLAN recovery code flow, the ath12kcorehalt function only reinitializes the “arvifs” list head. This causes the list node immediately following the lis...

kernel: wifi: cfg80211: cancel wiphy_work before freeing wiphy

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphywork before freeing wiphy A wiphywork can be queued from the moment the wiphy is allocated and initialized i.e. wiphynewnm. When a wiphywork is queued, the rdev::wiphywork is getting queued. If wiphyfr...