CVE-2023-52768

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: wilc1000: use vmm_table as array in wilc struct

Enabling KASAN and running some iperf tests raises some memory issues with vmm_table:

BUG: KASAN: slab-out-of-bounds in wilc_wlan_handle_txq+0x6ac/0xdb4 Write of size 4 at addr c3a61540 by task wlan0-tx/95

KASAN detects that we are writing data beyond range allocated to vmm_table. There is indeed a mismatch between the size passed to allocator in wilc_wlan_init, and the range of possible indexes used later: allocation size is missing a multiplication by sizeof(u32)

Affected Software

VendorProductVersion RangeStatus
LinuxLinux32dd0b22a5ba1dd296ccf2caf46ad44c3a8d5d98 < 541b3757fd443a68ed8d25968eae511a8275e7c8affected
LinuxLinux40b717bfcefab28a0656b8caa5e43d5449e5a671 < 4b0d6ddb6466d10df878a7787f175a0e4adc3e27affected
LinuxLinux40b717bfcefab28a0656b8caa5e43d5449e5a671 < 6aaf7cd8bdfe245d3c9a8b48fe70c2011965948eaffected
LinuxLinux40b717bfcefab28a0656b8caa5e43d5449e5a671 < 3ce1c2c3999b232258f7aabab311d47dda75605caffected
LinuxLinux40b717bfcefab28a0656b8caa5e43d5449e5a671 < 05ac1a198a63ad66bf5ae8b7321407c102d40ef3affected
LinuxLinux5212d958f6518003cd98c9886f8e8aedcfc25741affected
LinuxLinux5.15.68 < 5.15.140affected
LinuxLinux5.19.9 < 5.20affected
LinuxLinux6.0affected
LinuxLinux0 < 6.0unaffected
LinuxLinux5.15.140 <= 5.15.*unaffected
LinuxLinux6.1.64 <= 6.1.*unaffected
LinuxLinux6.5.13 <= 6.5.*unaffected
LinuxLinux6.6.3 <= 6.6.*unaffected
LinuxLinux6.7 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References