Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-43842
HistoryAug 17, 2024 - 9:21 a.m.

CVE-2024-43842 wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()

2024-08-1709:21:57
Linux
github.com
4
linux kernel
vulnerability
rtw89
array index
mistake
fix
boundary
svace

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()

In rtw89_sta_info_get_iter() ‘status->he_gi’ is compared to array size.
But then ‘rate->he_gi’ is used as array index instead of ‘status->he_gi’.
This can lead to go beyond array boundaries in case of ‘rate->he_gi’ is
not equal to ‘status->he_gi’ and is bigger than array size. Looks like
“copy-paste” mistake.

Fix this mistake by replacing ‘rate->he_gi’ with ‘status->he_gi’.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-43842