NetSight
high7.8

CVE-2020-12653

An issue was found in Linux kernel before 5.5.4.

Impact

An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.5.4
OpensuseLeap
Version 15.1
DebianDebian Linux
Versions 8.0, 9.0
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappElement Software
All versions
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappSteelstore Cloud Integrated Storage
All versions
NetappHci Compute Node Firmware
All versions
NetappA700s Firmware
All versions
NetappH300s Firmware
All versions

Weakness classification

References