CVE-2021-47347

wl1251: Fix possible buffer overflow in wl1251_cmd_scan

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wl1251: Fix possible buffer overflow in wl1251_cmd_scan

Function wl1251_cmd_scan calls memcpy without checking the length. Harden by checking the length is within the maximum allowed size.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
LinuxLinux	2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 57ad99ae3c6738ba87bad259bb57c641ca68ebf6Affected 2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before d3d8b9c9c7843dce31e284927d4c9904fd5a510aAffected 2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 0f6c0488368c9ac1aa685821916fadba32f5d1efAffected 2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 115103f6e3f1c26c473766c16439c7c8b235529aAffected 2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before d71dddeb5380613f9ef199f3e7368fd78fb1a46eAffected 2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before c5e4a10d7bd5d4f419d8b9705dff60cf69b302a1Affected 2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 302e2ee34c5f7c5d805b7f835d9a6f2b43474e2aAffected 2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 40af3960a15339e8bbd3be50c3bc7b35e1a0b6eaAffected 2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before d10a87a3535cce2b890897914f5d0d83df669c63Affected
LinuxLinux	2.6.31Affected before 2.6.31Not affected 4.4.276 through 4.4.Not affected 4.9.276 through 4.9.Not affected 4.14.240 through 4.14.Not affected 4.19.198 through 4.19.Not affected 5.4.133 through 5.4.Not affected 5.10.51 through 5.10.Not affected 5.12.18 through 5.12.Not affected 5.13.3 through 5.13.Not affected 5.14 and laterNot affected

Product

Versions

LinuxLinux

2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 57ad99ae3c6738ba87bad259bb57c641ca68ebf6Affected
2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before d3d8b9c9c7843dce31e284927d4c9904fd5a510aAffected
2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 0f6c0488368c9ac1aa685821916fadba32f5d1efAffected
2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 115103f6e3f1c26c473766c16439c7c8b235529aAffected
2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before d71dddeb5380613f9ef199f3e7368fd78fb1a46eAffected
2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before c5e4a10d7bd5d4f419d8b9705dff60cf69b302a1Affected
2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 302e2ee34c5f7c5d805b7f835d9a6f2b43474e2aAffected
2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before 40af3960a15339e8bbd3be50c3bc7b35e1a0b6eaAffected
2f01a1f58889fbfeb68b1bc1b52e4197f3333490 to before d10a87a3535cce2b890897914f5d0d83df669c63Affected

LinuxLinux

2.6.31Affected
before 2.6.31Not affected
4.4.276 through 4.4.*Not affected
4.9.276 through 4.9.*Not affected
4.14.240 through 4.14.*Not affected
4.19.198 through 4.19.*Not affected
5.4.133 through 5.4.*Not affected
5.10.51 through 5.10.*Not affected
5.12.18 through 5.12.*Not affected
5.13.3 through 5.13.*Not affected
5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.