PT-2021-2432 · Linux+5 · Linux Kernel+5
Dan Carpenter
·
Published
2021-03-10
·
Updated
2023-11-09
·
CVE-2021-28660
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions through 5.11.6
Description:
The issue is related to the
rtw wx set scan function in the Linux kernel, which allows writing beyond the end of the ->ssid[] array. This can lead to a buffer overflow in memory. The exploitation of this issue may cause a denial of service.Recommendations:
For Linux kernel versions through 5.11.6, update to a version later than 5.11.6 to resolve the issue. As a temporary workaround, consider restricting access to the
rtw wx set scan function in the drivers/staging/rtl8188eu/os dep/ioctl linux.c file until a patch is available.Fix
Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu