Aller au contenu
en Se connecter
8.8 Élevée

CVE-2024-49930 In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix array out-of-bound access in SoC…

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix array out-of-bound access in SoC stats Currently, the ath11k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. However, the ath11k_dp_process_rx() function access ath11k_soc_dp_stats::hal_reo_error using the REO destination SRNG ring ID, which is incorrect. SRNG ring ID differ from normal ring ID, and this usage leads to out-of-bounds array access. To fix this issue, modify ath11k_dp_process_rx() to use the normal ring ID directly instead of the SRNG ring ID to avoid out-of-bounds array access. Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

Produits et versions touchés

Produit Versions touchées Corrigé en
Linux 6.12 premières → < 6.12 6.12
Linux 6.11 premières → < 6.11.3 6.11.3
Linux 6.10 premières → < 6.10.14 6.10.14
Linux 6.6 premières → < 6.6.55 6.6.55
Linux 6.1 premières → < 6.1.113 6.1.113
Linux 5.15 premières → < 5.15.168 5.15.168
Linux 5.10 premières → < 5.10.227 5.10.227
Linux 5.6 Pas de correctif indiqué
RUGGEDCOM RST2428P Versions non publiées
Afficher les 3 autres branches
Produit Versions touchées Corrigé en
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family Versions non publiées
SCALANCE XCM-/XRM-/XCH-/XRH-300 family Versions non publiées
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 premières → < 1.1.1 1.1.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Linux

Les 18283 CVE de Linux →
CVE-2026-99270 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler() 8.1 Élevée CVE-2026-99269 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before… 7.8 Élevée CVE-2026-99261 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for… Non notée CVE-2026-99260 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags… Non notée
Suivre cette CVE