High · published March 28, 2023
A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.
| Product | Versions | Fixed in |
|---|---|---|
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| linux/linux_kernel | ≥ 3.2.1, < 4.14.315 | 4.14.315 |
| linux/linux_kernel | ≥ 4.19, < 4.19.283 | 4.19.283 |
| linux/linux_kernel | ≥ 5.4, < 5.4.243 | 5.4.243 |
| linux/linux_kernel | ≥ 5.10, < 5.10.180 | 5.10.180 |
| linux/linux_kernel | ≥ 5.15, < 5.15.110 | 5.15.110 |
| linux/linux_kernel | ≥ 6.1, < 6.1.27 | 6.1.27 |
| linux/linux_kernel | ≥ 6.2, < 6.2.14 | 6.2.14 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| netapp/h300s_firmware | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |