CVE-2024-49928

wifi: rtw89: avoid reading out of bounds when loading TX power FW elements

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: avoid reading out of bounds when loading TX power FW elements

Because the loop-expression will do one more time before getting false from

cond-expression, the original code copied one more entry size beyond valid

region.

Fix it by moving the entry copy to loop-body.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.7th percentile
Published
2024-10-21T18:01Z
EPSS history
Timeline
  • 21 OCT 18:01Z
    wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
    cvelistv5