Published: 17/03/2021 Updated: 09/11/2023

CVSS v2 Base Score: 8.3 | Impact Score: 10 | Exploitability Score: 6.5

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 739

Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel up to and including 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
fedoraproject fedora 33
debian debian linux 9.0
netapp cloud backup -
netapp solidfire_baseboard_management_controller_firmware -
netapp h700s_firmware -
netapp h700e_firmware -
netapp h410s_firmware -
netapp h300s_firmware -
netapp h500e_firmware -
netapp h300e_firmware -
netapp h500s_firmware -

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linuxc in the Linux kernel through 5116 allows writing beyond the end of the -&gt;ssid[] array NOTE: from the perspective of kernelorg releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/ ...

An issue was discovered in the Linux kernel Fastrpc_internal_invoke in drivers/misc/fastrpcc does not prevent user applications from sending kernel RPC messages This is a related issue to CVE-2019-2308 (CVE-2021-28375) A flaw was found in the Linux kernel The rtw_wx_set_scan driver allows writing beyond the end of the ->ssid[] array The hi ...

A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_bufferc in the Linux kernel before 539 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41 (CVE-2019-19060) A bypass was found for the Spectre v1 hardening in the eBPF engine of the Linux kernel The code in the kernel/bpf/verifier ...

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linuxc in the Linux kernel through 5116 allows writing beyond the end of the ->ssid[] array NOTE: from the perspective of kernelorg releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/stag ...

CWE-787 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=74b6b20df8cfe90ada777d621b54c32e69e27cd7 https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html https://security.netapp.com/advisory/ntap-20210507-0008/https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html http://www.openwall.com/lists/oss-security/2022/11/18/1 http://www.openwall.com/lists/oss-security/2022/11/21/2 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2021-28660

CVE-2021-28660

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect