CVE - CVE-2023-52768

CVE-ID
CVE-2023-52768	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: use vmm_table as array in wilc struct Enabling KASAN and running some iperf tests raises some memory issues with vmm_table: BUG: KASAN: slab-out-of-bounds in wilc_wlan_handle_txq+0x6ac/0xdb4 Write of size 4 at addr c3a61540 by task wlan0-tx/95 KASAN detects that we are writing data beyond range allocated to vmm_table. There is indeed a mismatch between the size passed to allocator in wilc_wlan_init, and the range of possible indexes used later: allocation size is missing a multiplication by sizeof(u32)
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/05ac1a198a63ad66bf5ae8b7321407c102d40ef3 URL:https://git.kernel.org/stable/c/05ac1a198a63ad66bf5ae8b7321407c102d40ef3 MISC:https://git.kernel.org/stable/c/3ce1c2c3999b232258f7aabab311d47dda75605c URL:https://git.kernel.org/stable/c/3ce1c2c3999b232258f7aabab311d47dda75605c MISC:https://git.kernel.org/stable/c/4b0d6ddb6466d10df878a7787f175a0e4adc3e27 URL:https://git.kernel.org/stable/c/4b0d6ddb6466d10df878a7787f175a0e4adc3e27 MISC:https://git.kernel.org/stable/c/541b3757fd443a68ed8d25968eae511a8275e7c8 URL:https://git.kernel.org/stable/c/541b3757fd443a68ed8d25968eae511a8275e7c8 MISC:https://git.kernel.org/stable/c/6aaf7cd8bdfe245d3c9a8b48fe70c2011965948e URL:https://git.kernel.org/stable/c/6aaf7cd8bdfe245d3c9a8b48fe70c2011965948e
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)