Riskcovery

CVE-2024-53189

wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan

State
Published
Severity
Not scored
Published
Dec 27, 2024
Updated
May 11, 2026
Reserved
Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan

The channels array in the cfg80211_scan_request has a __counted_by attribute attached to it, which points to the n_channels variable. This attribute is used in bounds checking, and if it is not set before the array is filled, then the bounds sanitizer will issue a warning or a kernel panic if CONFIG_UBSAN_TRAP is set.

This patch sets the size of allocated memory as the initial value for n_channels. It is updated with the actual number of added elements after the array is filled.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • aa4ec06c455d0200eea0a4361cc58eb5b8bf68c4 to before d4ef643ea78c59c22546046c25dc6e7206267672Affected
  • aa4ec06c455d0200eea0a4361cc58eb5b8bf68c4 to before 1a7b62ddf2c7642878c24f0e556041bb58c37527Affected
  • aa4ec06c455d0200eea0a4361cc58eb5b8bf68c4 to before 9c46a3a5b394d6d123866aa44436fc2cd342eb0dAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.11.11 through 6.11.*Not affected
  • 6.12.2 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.