CVE-2023-52768

wifi: wilc1000: use vmm_table as array in wilc struct

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: wilc1000: use vmm_table as array in wilc struct

Enabling KASAN and running some iperf tests raises some memory issues with vmm_table:

BUG: KASAN: slab-out-of-bounds in wilc_wlan_handle_txq+0x6ac/0xdb4 Write of size 4 at addr c3a61540 by task wlan0-tx/95

KASAN detects that we are writing data beyond range allocated to vmm_table. There is indeed a mismatch between the size passed to allocator in wilc_wlan_init, and the range of possible indexes used later: allocation size is missing a multiplication by sizeof(u32)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.6 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	32dd0b22a5ba1dd296ccf2caf46ad44c3a8d5d98 to before 541b3757fd443a68ed8d25968eae511a8275e7c8Affected 40b717bfcefab28a0656b8caa5e43d5449e5a671 to before 4b0d6ddb6466d10df878a7787f175a0e4adc3e27Affected 40b717bfcefab28a0656b8caa5e43d5449e5a671 to before 6aaf7cd8bdfe245d3c9a8b48fe70c2011965948eAffected 40b717bfcefab28a0656b8caa5e43d5449e5a671 to before 3ce1c2c3999b232258f7aabab311d47dda75605cAffected 40b717bfcefab28a0656b8caa5e43d5449e5a671 to before 05ac1a198a63ad66bf5ae8b7321407c102d40ef3Affected 5212d958f6518003cd98c9886f8e8aedcfc25741Affected 5.15.68 to before 5.15.140Affected 5.19.9 to before 5.20Affected
LinuxLinux	6.0Affected before 6.0Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

32dd0b22a5ba1dd296ccf2caf46ad44c3a8d5d98 to before 541b3757fd443a68ed8d25968eae511a8275e7c8Affected
40b717bfcefab28a0656b8caa5e43d5449e5a671 to before 4b0d6ddb6466d10df878a7787f175a0e4adc3e27Affected
40b717bfcefab28a0656b8caa5e43d5449e5a671 to before 6aaf7cd8bdfe245d3c9a8b48fe70c2011965948eAffected
40b717bfcefab28a0656b8caa5e43d5449e5a671 to before 3ce1c2c3999b232258f7aabab311d47dda75605cAffected
40b717bfcefab28a0656b8caa5e43d5449e5a671 to before 05ac1a198a63ad66bf5ae8b7321407c102d40ef3Affected
5212d958f6518003cd98c9886f8e8aedcfc25741Affected
5.15.68 to before 5.15.140Affected
5.19.9 to before 5.20Affected

LinuxLinux

6.0Affected
before 6.0Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.