Description
In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Debian / debian_linux10.0 – 10.0
- Linux / Linux kernel2.6.35 – 4.14.305
- NetApp / hci_baseboard_management_controllerh410c – h410c
- NetApp / hci_baseboard_management_controllerh500s – h500s
- NetApp / hci_baseboard_management_controllerh700s – h700s
- NetApp / hci_baseboard_management_controllerh410s – h410s
- NetApp / hci_baseboard_management_controllerh300s – h300s
References
- MISChttps://patchwork.kernel.org/project/linux-wireless/patch/20230110173007.57110-1-szymon.heidrich%40gmail.com/
- MISChttps://security.netapp.com/advisory/ntap-20230302-0003/
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
- MISChttps://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b870e73a56c4cccbec33224233eaf295839f228c
Updated 18m ago · 8 sources