Description

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexing Before request->channels[] can be used, request->n_channels must be set. Additionally, address calculations for memory after the "channels" array need to be calculated from the allocation base ("request") rather than via the first "out of bounds" index of "channels", otherwise run-time bounds checking will throw a warning.

INFO

Published Date :

2024-06-19T13:35:30.893Z

Last Modified :

2025-05-04T09:14:09.844Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-38562 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-38562.

URL Resource
https://git.kernel.org/stable/c/4e2a5566462b53db7d4c4722da86eedf0b8f546c cve-icon cve-icon
https://git.kernel.org/stable/c/838c7b8f1f278404d9d684c34a8cb26dc41aaaa1 cve-icon cve-icon
https://git.kernel.org/stable/c/8fa4d56564ee7cc2ee348258d88efe191d70dd7f cve-icon cve-icon
https://git.kernel.org/stable/c/ed74398642fcb19f6ff385c35a7d512c6663e17b cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024061954-CVE-2024-38562-21d9@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-38562 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-38562 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact