16692 matches found
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference in the iwlwifi:mvm module...
USN-6777-2 linux-azure vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service system crash. CVE-2023-47233 Several...
UBUNTU-CVE-2024-35937
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more...
DEBIAN-CVE-2024-35913
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSIONPROTECTIONNOTIF When we want to know whether we should look for the macid or the linkid in struct iwlmvmsessionprotnotif, we should look at the version of SESSIONPROTECTIONNOTIF. Thi...
DEBIAN-CVE-2024-35912
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the rx payload length check fails, or if kmemdup fails, we still need to free the command response. Fix that...
UBUNTU-CVE-2024-35913
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSIONPROTECTIONNOTIF When we want to know whether we should look for the macid or the linkid in struct iwlmvmsessionprotnotif, we should look at the version of SESSIONPROTECTIONNOTIF. Thi...
CVE-2024-35913
CVE-2024-35913 affects the Linux kernel’s wifi driver: the iwlwifi/mvm code incorrectly selects the mac_id vs link_id in struct iwl_mvm_session_prot_notif depending on the SESSION_PROTECTION_NOTIF version, triggering kernel warnings in time-event.c. The issue has a concrete fix in the referenced ...
CVE-2024-35913 wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSIONPROTECTIONNOTIF When we want to know whether we should look for the macid or the linkid in struct iwlmvmsessionprotnotif, we should look at the version of SESSIONPROTECTIONNOTIF. Thi...
DEBIAN-CVE-2024-35838
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet e.g. during connection to an AP MLD, we might remove the station without ever marking links valid, and leak them. F...
UBUNTU-CVE-2024-27410
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same time as changing it into mesh mode. This leads to an overwrite of data i...
DDP -based wireless access point D-Link DAP-2622 Configuration Change
The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to remotely make unauthorized changes to device configurations...
D-Link DAP-2622 Code Execution
The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 lies in buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Huawei EulerOS: Security Advisory for linux-firmware (EulerOS-SA-2024-1692)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IEEE 802.11 security vulnerabilities
IEEE 802.11 is a series of IEEE protocols for wireless LANs. A security vulnerability exists in IEEE 802.11 that stems from the ability of an attacker to trick a victim into connecting to an unintended or untrusted network...
CVE-2023-47210
Improper input validation for some IntelR PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2023-47859
Improper access control for some IntelR Wireless Bluetooth products for Windows before version 23.20 may allow an authenticated user to potentially enable denial of service via local access...
UBUNTU-CVE-2023-47210
Improper input validation for some IntelR PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2023-47210
Improper input validation for some IntelR PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
DEBIAN-CVE-2023-47210
Improper input validation for some IntelR PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access...