High · published December 18, 2022
An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.2.0, < 5.10.157 | 5.10.157 |
| linux/linux_kernel | ≥ 5.11, < 5.15.81 | 5.15.81 |
| linux/linux_kernel | ≥ 5.16, < 6.0.11 | 6.0.11 |
| debian/debian_linux | all versions | — |
| netapp/h410c_firmware | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |