NetSight
IP …
high7.1

CVE-2023-1380

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel.

Impact

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux
Versions 8.0, 9.0
LinuxLinux Kernel
from 3.2.1 before 4.14.315
from 4.19 before 4.19.283
from 5.4 before 5.4.243
from 5.10 before 5.10.180
from 5.15 before 5.15.110
from 6.1 before 6.1.27
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions
NetappH300s Firmware
All versions
DebianDebian Linux
Versions 10.0, 11.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04, 22.04

Weakness classification

CWE-125

References