CVE-2024-49928

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: avoid reading out of bounds when loading TX power FW elements

Because the loop-expression will do one more time before getting false from cond-expression, the original code copied one more entry size beyond valid region.

Fix it by moving the entry copy to loop-body.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux5ee7b2ea07cc6972bc505103f5d483943754a601 < 83c84cdb75572048b67d6a3916283aeac865996eaffected
LinuxLinux5ee7b2ea07cc6972bc505103f5d483943754a601 < 4007c3d2da31d0c755ea3fcf55e395118e5d5621affected
LinuxLinux5ee7b2ea07cc6972bc505103f5d483943754a601 < ed2e4bb17a4884cf29c3347353d8aabb7265b46caffected
LinuxLinux6.7affected
LinuxLinux0 < 6.7unaffected
LinuxLinux6.10.14 <= 6.10.*unaffected
LinuxLinux6.11.3 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References