In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiexcmd80211scan_ext()
Replace one-element array with a flexible-array member in
struct host_cmd_ds_802_11_scan_ext.
With this, fix the following warning:
elo 16 17:51:58 surfacebook kernel: ------------[ cut here ]------------ elo 16 17:51:58 surfacebook kernel: memcpy: detected field-spanning write (size 243) of single field "extscan->tlvbuffer" at drivers/net/wireless/marvell/mwifiex/scan.c:2239 (size 1) elo 16 17:51:58 surfacebook kernel: WARNING: CPU: 0 PID: 498 at drivers/net/wireless/marvell/mwifiex/scan.c:2239 mwifiexcmd80211scan_ext+0x83/0x90 [mwifiex]
[
{
"id": "CVE-2024-50008-073b9c4a",
"signature_version": "v1",
"digest": {
"length": 1450.0,
"function_hash": "192654294993377739555761088866227486287"
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c",
"function": "mwifiex_ret_802_11_scan_ext"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b55c8848fdc81514ec047b2a0ec782ffe9ab5323"
},
{
"id": "CVE-2024-50008-16a51698",
"signature_version": "v1",
"digest": {
"length": 1399.0,
"function_hash": "180667980841497698260957924695688353479"
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c",
"function": "mwifiex_ret_802_11_scan_ext"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@498365e52bebcbc36a93279fe7e9d6aec8479cee"
},
{
"id": "CVE-2024-50008-2e1b44cb",
"signature_version": "v1",
"digest": {
"line_hashes": [
"309644901985847204037677856867872113606",
"194220889311829731338676404997475872537",
"176608635086088755165560982101480517951",
"138634310713972100351007742616386346321",
"187620072220687217287633328746192927831"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b55c8848fdc81514ec047b2a0ec782ffe9ab5323"
},
{
"id": "CVE-2024-50008-2e4b854b",
"signature_version": "v1",
"digest": {
"length": 1399.0,
"function_hash": "180667980841497698260957924695688353479"
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c",
"function": "mwifiex_ret_802_11_scan_ext"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1756918f51e9ab247a0f4782cc28853c2bb457c1"
},
{
"id": "CVE-2024-50008-323d88be",
"signature_version": "v1",
"digest": {
"line_hashes": [
"309644901985847204037677856867872113606",
"194220889311829731338676404997475872537",
"176608635086088755165560982101480517951",
"138634310713972100351007742616386346321",
"187620072220687217287633328746192927831"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17199b69a84798efffc475040fbef44374ef1de1"
},
{
"id": "CVE-2024-50008-4ae80901",
"signature_version": "v1",
"digest": {
"line_hashes": [
"84534972571631177345838488366969582315",
"236746151878520119050215068451334227717",
"263565137586690110100337475539254531143",
"232210267291961064250993586835991378634"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/fw.h"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17199b69a84798efffc475040fbef44374ef1de1"
},
{
"id": "CVE-2024-50008-5316f33a",
"signature_version": "v1",
"digest": {
"line_hashes": [
"84534972571631177345838488366969582315",
"236746151878520119050215068451334227717",
"263565137586690110100337475539254531143",
"232210267291961064250993586835991378634"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/fw.h"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe"
},
{
"id": "CVE-2024-50008-693ff163",
"signature_version": "v1",
"digest": {
"length": 1399.0,
"function_hash": "180667980841497698260957924695688353479"
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c",
"function": "mwifiex_ret_802_11_scan_ext"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17199b69a84798efffc475040fbef44374ef1de1"
},
{
"id": "CVE-2024-50008-70676561",
"signature_version": "v1",
"digest": {
"line_hashes": [
"309644901985847204037677856867872113606",
"194220889311829731338676404997475872537",
"176608635086088755165560982101480517951",
"138634310713972100351007742616386346321",
"187620072220687217287633328746192927831"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3a12c30f9510f3753286fadbc6cdb7dad78c1d5"
},
{
"id": "CVE-2024-50008-7ba6f3c4",
"signature_version": "v1",
"digest": {
"line_hashes": [
"84534972571631177345838488366969582315",
"236746151878520119050215068451334227717",
"263565137586690110100337475539254531143",
"232210267291961064250993586835991378634"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/fw.h"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1756918f51e9ab247a0f4782cc28853c2bb457c1"
},
{
"id": "CVE-2024-50008-91497d6a",
"signature_version": "v1",
"digest": {
"length": 1399.0,
"function_hash": "180667980841497698260957924695688353479"
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c",
"function": "mwifiex_ret_802_11_scan_ext"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71267bd4e8c752d7af6c6b96bb83984a6a95273d"
},
{
"id": "CVE-2024-50008-91750451",
"signature_version": "v1",
"digest": {
"line_hashes": [
"309644901985847204037677856867872113606",
"194220889311829731338676404997475872537",
"176608635086088755165560982101480517951",
"138634310713972100351007742616386346321",
"187620072220687217287633328746192927831"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f9310a6704bf52e2493480edea896e1f9b795d40"
},
{
"id": "CVE-2024-50008-9267039f",
"signature_version": "v1",
"digest": {
"length": 1399.0,
"function_hash": "180667980841497698260957924695688353479"
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c",
"function": "mwifiex_ret_802_11_scan_ext"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe"
},
{
"id": "CVE-2024-50008-a26356f4",
"signature_version": "v1",
"digest": {
"length": 1399.0,
"function_hash": "180667980841497698260957924695688353479"
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c",
"function": "mwifiex_ret_802_11_scan_ext"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f9310a6704bf52e2493480edea896e1f9b795d40"
},
{
"id": "CVE-2024-50008-a8fc9c91",
"signature_version": "v1",
"digest": {
"line_hashes": [
"309644901985847204037677856867872113606",
"194220889311829731338676404997475872537",
"176608635086088755165560982101480517951",
"138634310713972100351007742616386346321",
"187620072220687217287633328746192927831"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71267bd4e8c752d7af6c6b96bb83984a6a95273d"
},
{
"id": "CVE-2024-50008-b976b6b7",
"signature_version": "v1",
"digest": {
"length": 1399.0,
"function_hash": "180667980841497698260957924695688353479"
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c",
"function": "mwifiex_ret_802_11_scan_ext"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3a12c30f9510f3753286fadbc6cdb7dad78c1d5"
},
{
"id": "CVE-2024-50008-bb73e933",
"signature_version": "v1",
"digest": {
"line_hashes": [
"84534972571631177345838488366969582315",
"236746151878520119050215068451334227717",
"263565137586690110100337475539254531143",
"232210267291961064250993586835991378634"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/fw.h"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@498365e52bebcbc36a93279fe7e9d6aec8479cee"
},
{
"id": "CVE-2024-50008-bd9b3e38",
"signature_version": "v1",
"digest": {
"line_hashes": [
"309644901985847204037677856867872113606",
"194220889311829731338676404997475872537",
"176608635086088755165560982101480517951",
"138634310713972100351007742616386346321",
"187620072220687217287633328746192927831"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1756918f51e9ab247a0f4782cc28853c2bb457c1"
},
{
"id": "CVE-2024-50008-be07738c",
"signature_version": "v1",
"digest": {
"line_hashes": [
"84534972571631177345838488366969582315",
"236746151878520119050215068451334227717",
"263565137586690110100337475539254531143",
"232210267291961064250993586835991378634"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/fw.h"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71267bd4e8c752d7af6c6b96bb83984a6a95273d"
},
{
"id": "CVE-2024-50008-caf9cac6",
"signature_version": "v1",
"digest": {
"length": 1399.0,
"function_hash": "180667980841497698260957924695688353479"
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c",
"function": "mwifiex_ret_802_11_scan_ext"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc"
},
{
"id": "CVE-2024-50008-d275a335",
"signature_version": "v1",
"digest": {
"line_hashes": [
"84534972571631177345838488366969582315",
"236746151878520119050215068451334227717",
"263565137586690110100337475539254531143",
"232210267291961064250993586835991378634"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/fw.h"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f9310a6704bf52e2493480edea896e1f9b795d40"
},
{
"id": "CVE-2024-50008-df32a952",
"signature_version": "v1",
"digest": {
"line_hashes": [
"84534972571631177345838488366969582315",
"236746151878520119050215068451334227717",
"263565137586690110100337475539254531143",
"232210267291961064250993586835991378634"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/fw.h"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a3a12c30f9510f3753286fadbc6cdb7dad78c1d5"
},
{
"id": "CVE-2024-50008-e1f65835",
"signature_version": "v1",
"digest": {
"line_hashes": [
"309644901985847204037677856867872113606",
"194220889311829731338676404997475872537",
"176608635086088755165560982101480517951",
"138634310713972100351007742616386346321",
"187620072220687217287633328746192927831"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@498365e52bebcbc36a93279fe7e9d6aec8479cee"
},
{
"id": "CVE-2024-50008-e2ecc96a",
"signature_version": "v1",
"digest": {
"line_hashes": [
"309644901985847204037677856867872113606",
"194220889311829731338676404997475872537",
"176608635086088755165560982101480517951",
"138634310713972100351007742616386346321",
"187620072220687217287633328746192927831"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc"
},
{
"id": "CVE-2024-50008-e45ba7bc",
"signature_version": "v1",
"digest": {
"line_hashes": [
"309644901985847204037677856867872113606",
"194220889311829731338676404997475872537",
"176608635086088755165560982101480517951",
"138634310713972100351007742616386346321",
"187620072220687217287633328746192927831"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/scan.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe"
},
{
"id": "CVE-2024-50008-f9745a7a",
"signature_version": "v1",
"digest": {
"line_hashes": [
"84534972571631177345838488366969582315",
"236746151878520119050215068451334227717",
"263565137586690110100337475539254531143",
"232210267291961064250993586835991378634"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/fw.h"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b55c8848fdc81514ec047b2a0ec782ffe9ab5323"
},
{
"id": "CVE-2024-50008-fbc46082",
"signature_version": "v1",
"digest": {
"line_hashes": [
"84534972571631177345838488366969582315",
"236746151878520119050215068451334227717",
"263565137586690110100337475539254531143",
"232210267291961064250993586835991378634"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/wireless/marvell/mwifiex/fw.h"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc"
}
]