CVE-2024-49928: wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
Because the loop-expression will do one more time before getting false from cond-expression, the original code copied one more entry size beyond valid region.
Fix it by moving the entry copy to loop-body.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49928?
CVE-2024-49928 has a medium severity rating due to the potential for buffer overflow leading to a crash or possible code execution.
How do I fix CVE-2024-49928?
To fix CVE-2024-49928, users should upgrade the Linux kernel to version 6.10.14 or later, or to the versions between 6.11 and 6.11.3.
What systems are affected by CVE-2024-49928?
CVE-2024-49928 affects the Linux kernel versions prior to 6.10.14 and from 6.11 to 6.11.3.
What is the cause of CVE-2024-49928?
CVE-2024-49928 is caused by inadequate bounds checking when reading TX power firmware elements in the Linux kernel.
Can CVE-2024-49928 be exploited remotely?
CVE-2024-49928 may be exploitable remotely under specific circumstances, making it crucial for affected systems to be patched promptly.