7.1

CVE-2023-52525

In the Linux kernel, the following vulnerability has been resolved:

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

Only skip the code path trying to access the rfc1042 headers when the
buffer is too small, so the driver can still process packets without
rfc1042 headers.
Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.10.195 < 5.10.198
Linux ≫ Linux Kernel Version >= 5.15.132 < 5.15.135
Linux ≫ Linux Kernel Version >= 6.1.53 < 6.1.57
Linux ≫ Linux Kernel Version >= 6.5.3 < 6.5.7
Linux ≫ Linux Kernel Version4.14.326
Linux ≫ Linux Kernel Version4.19.295
Linux ≫ Linux Kernel Version5.4.257
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.01% 0.011
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.