CVE-2023-1380

תיאור (מקור, אנגלית)

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.

מדדים

CVSS 3.1

7.1 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS — סבירות ניצול

17% (אחוזון 100) נכון ל-8/10/2026

CWE

CWE-125

מוצרים מושפעים

redhat: enterprise linux; linux: linux kernel; netapp: h500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h410s firmware; netapp: h410s; netapp: h410c firmware; netapp: h410c; netapp: h300s firmware; netapp: h300s; debian: debian linux; canonical: ubuntu linux

קישורים

• https://bugzilla.redhat.com/show_bug.cgi?id=2177883 Issue TrackingMitigationPatchThird Party Advisory
• https://lore.kernel.org/linux-wireless/20230309104457.22628-1-jisoo.jang%40yon‮… Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=2177883 Issue TrackingMitigationPatchThird Party Advisory
• https://lore.kernel.org/linux-wireless/20230309104457.22628-1-jisoo.jang%40yon‮… Patch
• http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-‮… Third Party AdvisoryVDB Entry
• http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-‮… Third Party AdvisoryVDB Entry
• https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html Mailing ListThird Party Advisory
• https://security.netapp.com/advisory/ntap-20230511-0001/ Third Party Advisory
• https://www.debian.org/security/2023/dsa-5480 Third Party Advisory