NetSight
IP …
high8.8

CVE-2021-28660

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array.

Impact

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.12 before 4.4.262
from 4.5 before 4.9.262
from 4.10 before 4.14.226
from 4.15 before 4.19.181
from 4.20 before 5.4.106
from 5.5 before 5.10.24
FedoraprojectFedora
Version 33
DebianDebian Linux
Version 9.0
NetappCloud Backup
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
NetappH700s Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
NetappH300s Firmware
All versions
NetappH500e Firmware
All versions
NetappH300e Firmware
All versions
NetappH500s Firmware
All versions

Weakness classification

CWE-787

References