rtwwxsetscan in drivers/staging/rtl8188eu/osdep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.
{
"unresolved_ranges": [
{
"source": "CPE_FIELD",
"cpe": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.0"
}
]
},
{
"source": "CPE_FIELD",
"cpe": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "33"
}
]
},
{
"source": "CPE_FIELD",
"cpe": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "3.12"
},
{
"fixed": "4.4.262"
},
{
"introduced": "4.5"
},
{
"fixed": "4.9.262"
},
{
"introduced": "4.10"
},
{
"fixed": "4.14.226"
},
{
"introduced": "4.15"
},
{
"fixed": "4.19.181"
},
{
"introduced": "4.20"
},
{
"fixed": "5.4.106"
},
{
"introduced": "5.5"
},
{
"fixed": "5.10.24"
},
{
"introduced": "5.11"
},
{
"fixed": "5.11.7"
}
]
},
{
"source": "DESCRIPTION",
"extracted_events": [
{
"fixed": "5.11.6"
}
]
}
]
}