CVE-2024-50008

wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: Oct 15, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()

Replace one-element array with a flexible-array member in `struct host_cmd_ds_802_11_scan_ext`.

With this, fix the following warning:

elo 16 17:51:58 surfacebook kernel: ------------[ cut here ]------------ elo 16 17:51:58 surfacebook kernel: memcpy: detected field-spanning write (size 243) of single field "ext_scan->tlv_buffer" at drivers/net/wireless/marvell/mwifiex/scan.c:2239 (size 1) elo 16 17:51:58 surfacebook kernel: WARNING: CPU: 0 PID: 498 at drivers/net/wireless/marvell/mwifiex/scan.c:2239 mwifiex_cmd_802_11_scan_ext+0x83/0x90 [mwifiex]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	21f58d200388480547df909b5464b5aafebf299d to before b55c8848fdc81514ec047b2a0ec782ffe9ab5323Affected 21f58d200388480547df909b5464b5aafebf299d to before f9310a6704bf52e2493480edea896e1f9b795d40Affected 21f58d200388480547df909b5464b5aafebf299d to before 1756918f51e9ab247a0f4782cc28853c2bb457c1Affected 21f58d200388480547df909b5464b5aafebf299d to before e59bdb1ba594104cd0ee0af3ee9e4435d842a8feAffected 21f58d200388480547df909b5464b5aafebf299d to before 17199b69a84798efffc475040fbef44374ef1de1Affected 21f58d200388480547df909b5464b5aafebf299d to before fef7b51f22cf2049b0ca6740adeb0ba6f2e671dcAffected 21f58d200388480547df909b5464b5aafebf299d to before 71267bd4e8c752d7af6c6b96bb83984a6a95273dAffected 21f58d200388480547df909b5464b5aafebf299d to before a3a12c30f9510f3753286fadbc6cdb7dad78c1d5Affected 21f58d200388480547df909b5464b5aafebf299d to before 498365e52bebcbc36a93279fe7e9d6aec8479ceeAffected
LinuxLinux	3.15Affected before 3.15Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.55 through 6.6.Not affected 6.10.14 through 6.10.Not affected 6.11.3 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

21f58d200388480547df909b5464b5aafebf299d to before b55c8848fdc81514ec047b2a0ec782ffe9ab5323Affected
21f58d200388480547df909b5464b5aafebf299d to before f9310a6704bf52e2493480edea896e1f9b795d40Affected
21f58d200388480547df909b5464b5aafebf299d to before 1756918f51e9ab247a0f4782cc28853c2bb457c1Affected
21f58d200388480547df909b5464b5aafebf299d to before e59bdb1ba594104cd0ee0af3ee9e4435d842a8feAffected
21f58d200388480547df909b5464b5aafebf299d to before 17199b69a84798efffc475040fbef44374ef1de1Affected
21f58d200388480547df909b5464b5aafebf299d to before fef7b51f22cf2049b0ca6740adeb0ba6f2e671dcAffected
21f58d200388480547df909b5464b5aafebf299d to before 71267bd4e8c752d7af6c6b96bb83984a6a95273dAffected
21f58d200388480547df909b5464b5aafebf299d to before a3a12c30f9510f3753286fadbc6cdb7dad78c1d5Affected
21f58d200388480547df909b5464b5aafebf299d to before 498365e52bebcbc36a93279fe7e9d6aec8479ceeAffected

LinuxLinux

3.15Affected
before 3.15Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.55 through 6.6.*Not affected
6.10.14 through 6.10.*Not affected
6.11.3 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.