CVE-2024-50008: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiexcmd80211scanext()
Replace one-element array with a flexible-array member in struct hostcmdds80211scanext.
With this, fix the following warning:
elo 16 17:51:58 surfacebook kernel: ------------[ cut here ]------------ elo 16 17:51:58 surfacebook kernel: memcpy: detected field-spanning write (size 243) of single field "extscan->tlvbuffer" at drivers/net/wireless/marvell/mwifiex/scan.c:2239 (size 1) elo 16 17:51:58 surfacebook kernel: WARNING: CPU: 0 PID: 498 at drivers/net/wireless/marvell/mwifiex/scan.c:2239 mwifiexcmd80211scanext+0x83/0x90 [mwifiex]
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50008?
CVE-2024-50008 has been classified with a moderate severity level.
How do I fix CVE-2024-50008?
To address CVE-2024-50008, upgrade the Linux kernel to version 6.1.123-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-50008?
CVE-2024-50008 affects Linux kernel versions up to and including 5.15.168, as well as ranges 5.11 through 5.16, 6.2 through 6.6.55, and several others until 6.11.
Is there a known exploit for CVE-2024-50008?
As of current information, there are no public exploits available for CVE-2024-50008.
What component of the Linux kernel is impacted by CVE-2024-50008?
CVE-2024-50008 impacts the mwifiex driver component related to Wi-Fi functionality in the Linux kernel.