In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction Add guards to ensure ie_length is large enough before subtracting fixed IE offsets to prevent unsigned integer underflow.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.15, < 7.0.13CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
7.1CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* | ||
7.1CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* | ||
7.1CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* | ||
7.1CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.