跳转到帖子

Ubuntu: (Multiple Advisories) (CVE-2023-52531): Linux kernel vulnerabilities

recommended_posts

发布于
  • Members

Ubuntu: (Multiple Advisories) (CVE-2023-52531): Linux kernel vulnerabilities

Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
03/02/2024
Created
11/05/2024
Added
11/04/2024
Modified
01/30/2025

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, space is kzalloc()'ed for: sizeof(struct iwl_nvm_data) + sizeof(struct ieee80211_channel) + sizeof(struct ieee80211_rate) 'mvm->nvm_data' is a 'struct iwl_nvm_data', so it is fine. At the end of this structure, there is the 'channels' flex array. Each element is of type 'struct ieee80211_channel'. So only 1 element is allocated in this array. When doing: mvm->nvm_data->bands[0].channels = mvm->nvm_data->channels; We point at the first element of the 'channels' flex array. So this is fine. However, when doing: mvm->nvm_data->bands[0].bitrates = (void *)((u8 *)mvm->nvm_data->channels + 1); because of the "(u8 *)" cast, we add only 1 to the address of the beginning of the flex array. It is likely that we want point at the 'struct ieee80211_rate' allocated just after. Remove the spurious casting so that the pointer arithmetic works as expected.

Solution(s)

  • ubuntu-upgrade-linux-image-4-15-0-1137-oracle
  • ubuntu-upgrade-linux-image-4-15-0-1158-kvm
  • ubuntu-upgrade-linux-image-4-15-0-1168-gcp
  • ubuntu-upgrade-linux-image-4-15-0-1175-aws
  • ubuntu-upgrade-linux-image-4-15-0-1183-azure
  • ubuntu-upgrade-linux-image-4-15-0-231-generic
  • ubuntu-upgrade-linux-image-4-15-0-231-lowlatency
  • ubuntu-upgrade-linux-image-4-4-0-1138-aws
  • ubuntu-upgrade-linux-image-4-4-0-1139-kvm
  • ubuntu-upgrade-linux-image-4-4-0-1176-aws
  • ubuntu-upgrade-linux-image-4-4-0-261-generic
  • ubuntu-upgrade-linux-image-4-4-0-261-lowlatency
  • ubuntu-upgrade-linux-image-5-4-0-1044-iot
  • ubuntu-upgrade-linux-image-5-4-0-1054-xilinx-zynqmp
  • ubuntu-upgrade-linux-image-5-4-0-1082-ibm
  • ubuntu-upgrade-linux-image-5-4-0-1094-bluefield
  • ubuntu-upgrade-linux-image-5-4-0-1102-gkeop
  • ubuntu-upgrade-linux-image-5-4-0-1119-raspi
  • ubuntu-upgrade-linux-image-5-4-0-1123-kvm
  • ubuntu-upgrade-linux-image-5-4-0-1134-oracle
  • ubuntu-upgrade-linux-image-5-4-0-1135-aws
  • ubuntu-upgrade-linux-image-5-4-0-1139-azure
  • ubuntu-upgrade-linux-image-5-4-0-1139-gcp
  • ubuntu-upgrade-linux-image-5-4-0-1140-azure
  • ubuntu-upgrade-linux-image-5-4-0-200-generic
  • ubuntu-upgrade-linux-image-5-4-0-200-generic-lpae
  • ubuntu-upgrade-linux-image-5-4-0-200-lowlatency
  • ubuntu-upgrade-linux-image-aws
  • ubuntu-upgrade-linux-image-aws-hwe
  • ubuntu-upgrade-linux-image-aws-lts-18-04
  • ubuntu-upgrade-linux-image-aws-lts-20-04
  • ubuntu-upgrade-linux-image-azure
  • ubuntu-upgrade-linux-image-azure-lts-18-04
  • ubuntu-upgrade-linux-image-azure-lts-20-04
  • ubuntu-upgrade-linux-image-bluefield
  • ubuntu-upgrade-linux-image-gcp
  • ubuntu-upgrade-linux-image-gcp-lts-18-04
  • ubuntu-upgrade-linux-image-gcp-lts-20-04
  • ubuntu-upgrade-linux-image-generic
  • ubuntu-upgrade-linux-image-generic-hwe-16-04
  • ubuntu-upgrade-linux-image-generic-hwe-18-04
  • ubuntu-upgrade-linux-image-generic-lpae
  • ubuntu-upgrade-linux-image-generic-lts-xenial
  • ubuntu-upgrade-linux-image-gke
  • ubuntu-upgrade-linux-image-gkeop
  • ubuntu-upgrade-linux-image-gkeop-5-4
  • ubuntu-upgrade-linux-image-ibm
  • ubuntu-upgrade-linux-image-ibm-lts-20-04
  • ubuntu-upgrade-linux-image-kvm
  • ubuntu-upgrade-linux-image-lowlatency
  • ubuntu-upgrade-linux-image-lowlatency-hwe-16-04
  • ubuntu-upgrade-linux-image-lowlatency-hwe-18-04
  • ubuntu-upgrade-linux-image-lowlatency-lts-xenial
  • ubuntu-upgrade-linux-image-oem
  • ubuntu-upgrade-linux-image-oem-osp1
  • ubuntu-upgrade-linux-image-oracle
  • ubuntu-upgrade-linux-image-oracle-lts-18-04
  • ubuntu-upgrade-linux-image-oracle-lts-20-04
  • ubuntu-upgrade-linux-image-raspi
  • ubuntu-upgrade-linux-image-raspi-hwe-18-04
  • ubuntu-upgrade-linux-image-raspi2
  • ubuntu-upgrade-linux-image-snapdragon-hwe-18-04
  • ubuntu-upgrade-linux-image-virtual
  • ubuntu-upgrade-linux-image-virtual-hwe-16-04
  • ubuntu-upgrade-linux-image-virtual-hwe-18-04
  • ubuntu-upgrade-linux-image-virtual-lts-xenial
  • ubuntu-upgrade-linux-image-xilinx-zynqmp

References

  • https://attackerkb.com/topics/cve-2023-52531
  • CVE - 2023-52531
  • USN-7088-1
  • USN-7088-2
  • USN-7088-3
  • USN-7088-4
  • USN-7088-5
  • USN-7119-1
  • USN-7121-1
  • USN-7121-2
  • USN-7121-3
  • USN-7148-1
View more
  • 查看数 705
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。
注意:你的帖子需要版主批准后才能看到。

游客
回帖…