CVEvulnerability

CVE-2020-12465

6.7 MEDIUM Published 2020-04-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.

Affected configurations

• linux linux kernel (>= 4.16 < 4.19.111) • linux linux kernel (>= 4.20 < 5.4.26) • linux linux kernel (>= 5.5 < 5.5.10) • netapp active iq unified manager • netapp cloud backup • netapp hci baseboard management controller h300s • netapp hci baseboard management controller h410c • netapp hci baseboard management controller h410s • netapp hci baseboard management controller h500s • netapp hci baseboard management controller h610c • netapp hci baseboard management controller h610s • netapp hci baseboard management controller h615c • netapp hci baseboard management controller h700s • netapp solidfire \& hci management node • netapp steelstore cloud integrated storage • netapp aff baseboard management controller a700s • netapp hci compute node • netapp solidfire baseboard management controller

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References