github - ghsa-xqf9-qrgq-fxfv

ghsa-xqf9-qrgq-fxfv

Vulnerability from github

Published

2024-03-03 00:30

Modified

2024-04-04 15:30

Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

Only skip the code path trying to access the rfc1042 headers when the buffer is too small, so the driver can still process packets without rfc1042 headers.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-52525"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-02T22:15:48Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet\n\nOnly skip the code path trying to access the rfc1042 headers when the\nbuffer is too small, so the driver can still process packets without\nrfc1042 headers.",
  "id": "GHSA-xqf9-qrgq-fxfv",
  "modified": "2024-04-04T15:30:33Z",
  "published": "2024-03-03T00:30:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52525"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/10a18c8bac7f60d32b7af22da03b66f350beee38"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/16cc18b9080892d1a0200a38e36ae52e464bc555"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6b706286473db4fd54b5f869faa67f4a8cb18e99"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/71b1d2b57f145c8469aa9346f0fd57bf59b2b89c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/aef7a0300047e7b4707ea0411dc9597cba108fc8"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b8e260654a29de872e7cb85387d8ab8974694e8e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/be2ff39b1504c5359f4a083c1cfcad21d666e216"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

cve-2023-52525

Vulnerability from cvelistv5

Published

2024-03-02 21:52

Modified

2024-11-04 14:48

Severity ?

Summary

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

References

▼	URL	Tags
	https://git.kernel.org/stable/c/71b1d2b57f145c8469aa9346f0fd57bf59b2b89c
	https://git.kernel.org/stable/c/16cc18b9080892d1a0200a38e36ae52e464bc555
	https://git.kernel.org/stable/c/b8e260654a29de872e7cb85387d8ab8974694e8e
	https://git.kernel.org/stable/c/10a18c8bac7f60d32b7af22da03b66f350beee38
	https://git.kernel.org/stable/c/5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6
	https://git.kernel.org/stable/c/6b706286473db4fd54b5f869faa67f4a8cb18e99
	https://git.kernel.org/stable/c/be2ff39b1504c5359f4a083c1cfcad21d666e216
	https://git.kernel.org/stable/c/aef7a0300047e7b4707ea0411dc9597cba108fc8

Impacted products

▼	Vendor	Product
	Linux	Linux
	Linux	Linux

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52525",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-05T22:09:59.772787Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:22:08.743Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:03:20.670Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/71b1d2b57f145c8469aa9346f0fd57bf59b2b89c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/16cc18b9080892d1a0200a38e36ae52e464bc555"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b8e260654a29de872e7cb85387d8ab8974694e8e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/10a18c8bac7f60d32b7af22da03b66f350beee38"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6b706286473db4fd54b5f869faa67f4a8cb18e99"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/be2ff39b1504c5359f4a083c1cfcad21d666e216"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/aef7a0300047e7b4707ea0411dc9597cba108fc8"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/marvell/mwifiex/sta_rx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "71b1d2b57f14",
              "status": "affected",
              "version": "f517c97fc129",
              "versionType": "git"
            },
            {
              "lessThan": "16cc18b90808",
              "status": "affected",
              "version": "8824aa4ab62c",
              "versionType": "git"
            },
            {
              "lessThan": "b8e260654a29",
              "status": "affected",
              "version": "29eca8b7863d",
              "versionType": "git"
            },
            {
              "lessThan": "10a18c8bac7f",
              "status": "affected",
              "version": "3fe3923d092e",
              "versionType": "git"
            },
            {
              "lessThan": "5afb996349cb",
              "status": "affected",
              "version": "7c54b6fc39eb",
              "versionType": "git"
            },
            {
              "lessThan": "6b706286473d",
              "status": "affected",
              "version": "3975e21d4d01",
              "versionType": "git"
            },
            {
              "lessThan": "be2ff39b1504",
              "status": "affected",
              "version": "650d1bc02fba",
              "versionType": "git"
            },
            {
              "lessThan": "aef7a0300047",
              "status": "affected",
              "version": "119585281617",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/wireless/marvell/mwifiex/sta_rx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4.14.327",
              "status": "affected",
              "version": "4.14.326",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19.296",
              "status": "affected",
              "version": "4.19.295",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.258",
              "status": "affected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.198",
              "status": "affected",
              "version": "5.10.195",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.135",
              "status": "affected",
              "version": "5.15.132",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.57",
              "status": "affected",
              "version": "6.1.53",
              "versionType": "semver"
            },
            {
              "lessThan": "6.5.7",
              "status": "affected",
              "version": "6.5.3",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet\n\nOnly skip the code path trying to access the rfc1042 headers when the\nbuffer is too small, so the driver can still process packets without\nrfc1042 headers."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-04T14:48:33.606Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/71b1d2b57f145c8469aa9346f0fd57bf59b2b89c"
        },
        {
          "url": "https://git.kernel.org/stable/c/16cc18b9080892d1a0200a38e36ae52e464bc555"
        },
        {
          "url": "https://git.kernel.org/stable/c/b8e260654a29de872e7cb85387d8ab8974694e8e"
        },
        {
          "url": "https://git.kernel.org/stable/c/10a18c8bac7f60d32b7af22da03b66f350beee38"
        },
        {
          "url": "https://git.kernel.org/stable/c/5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6"
        },
        {
          "url": "https://git.kernel.org/stable/c/6b706286473db4fd54b5f869faa67f4a8cb18e99"
        },
        {
          "url": "https://git.kernel.org/stable/c/be2ff39b1504c5359f4a083c1cfcad21d666e216"
        },
        {
          "url": "https://git.kernel.org/stable/c/aef7a0300047e7b4707ea0411dc9597cba108fc8"
        }
      ],
      "title": "wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet",
      "x_generator": {
        "engine": "bippy-9e1c9544281a"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52525",
    "datePublished": "2024-03-02T21:52:31.638Z",
    "dateReserved": "2024-02-20T12:30:33.317Z",
    "dateUpdated": "2024-11-04T14:48:33.606Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted