CVE-2024-43842

wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()

published August 17, 2024

CVSS
—
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()

In rtw89_sta_info_get_iter() 'status->he_gi' is compared to array size.

But then 'rate->he_gi' is used as array index instead of 'status->he_gi'.

This can lead to go beyond array boundaries in case of 'rate->he_gi' is

not equal to 'status->he_gi' and is bigger than array size. Looks like

"copy-paste" mistake.

Fix this mistake by replacing 'rate->he_gi' with 'status->he_gi'.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Published
2024-08-17T09:21Z
EPSS history
Timeline
  • 17 AUG 09:21Z
    wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
    cvelistv5