CVEvulnerability

CVE-2024-38562

7.8 HIGH Published 2024-06-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-06-19
Last modified
2026-06-17
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-129

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexing Before request->channels[] can be used, request->n_channels must be set. Additionally, address calculations for memory after the "channels" array need to be calculated from the allocation base ("request") rather than via the first "out of bounds" index of "channels", otherwise run-time bounds checking will throw a warning.

Affected configurations

• linux linux kernel (>= 6.6 < 6.6.33) • linux linux kernel (>= 6.7 < 6.8.12) • linux linux kernel (>= 6.9 < 6.9.3)

Related

Weakness · CWE (1)

  • CWE-129 Improper Validation of Array Index weakness

References