An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy. Reference and upstream commit:

Created kernel tracking bugs for this issue: Affects:….

Source link

You must be logged in to post a comment.