CVSS 7.1 · High EPSS 0,16%
Kerentanan pada linux kernel, debian linux. Skor CVSS 3.1 7.1 (High) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chan_stats array to zero The adapter->chan_stats[] array is initialized in mwifiex_init_channel_scan_gap() with vmalloc(), which doesn't zero out memory. The array is filled in mwifiex_update_chan_statistics() and then the user can query the data in mwifiex_cfg80211_dump_survey(). There are two potential issues here. What if the user calls mwifiex_cfg80211_dump_survey() before the data has been filled in. Also the mwifiex_update_chan_statistics() function doesn't necessarily initialize the whole array. Since the array was not initialized at the start that could result in an information leak. Also this array is pretty small. It's a maximum of 900 bytes so it's more appropriate to use kcalloc() instead vmalloc().
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 3.19 hingga sebelum 5.4.299 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.243 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.192 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.151 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.105 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.12.46 |
| linux | linux kernel | Versi 6.13 hingga sebelum 6.16.6 |
| linux | linux kernel | Versi 6.17 rc1 |
| linux | linux kernel | Versi 6.17 rc2 |
| linux | linux kernel | Versi 6.17 rc3 |
| linux | linux kernel | Versi 6.17 rc4 |
| debian | debian linux | Versi 11.0 |