High · published October 4, 2025
In the Linux kernel, the following vulnerability has been resolved:
staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
The "exc->key_len" is a u16 that comes from the user. If it's over
IW_ENCODING_TOKEN_MAX (64) that could lead to memory corruption.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.12, < 4.14.322 | 4.14.322 |
| linux/linux_kernel | ≥ 4.15, < 4.19.291 | 4.19.291 |
| linux/linux_kernel | ≥ 4.20, < 5.4.253 | 5.4.253 |
| linux/linux_kernel | ≥ 5.5, < 5.10.190 | 5.10.190 |
| linux/linux_kernel | ≥ 5.11, < 5.15.124 | 5.15.124 |
| linux/linux_kernel | ≥ 5.16, < 6.1.43 | 6.1.43 |
| linux/linux_kernel | ≥ 6.2, < 6.4.8 | 6.4.8 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |