References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787

https://git.kernel.org/stable/c/4dd0547e8b45faf6f95373be5436b66cde326c0e

https://git.kernel.org/stable/c/b302dce3d9edea5b93d1902a541684a967f3c63c

https://git.kernel.org/stable/c/dfe13eaab043130f90dd3d57c7d88577c04adc97

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()

reg_cap.phy_id is extracted from WMI event and could be an unexpected value
in case some errors happen. As a result out-of-bound write may occur to
soc->hal_reg_cap. Fix it by validating reg_cap.phy_id before using it.

This is found during code review.

Compile tested only.

kernel.org https://git.kernel.org/stable/c/4dd0547e8b45faf6f95373be5436b66cde326c0e [No types assigned]

kernel.org https://git.kernel.org/stable/c/b302dce3d9edea5b93d1902a541684a967f3c63c [No types assigned]

kernel.org https://git.kernel.org/stable/c/dfe13eaab043130f90dd3d57c7d88577c04adc97 [No types assigned]