CVE-2023-1380 Information

Description

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer defined as WL_EXTRA_BUF_MAX leading to a denial of service.

Reference

https://www.openwall.com/lists/oss-security/2023/03/14/1 https://bugzilla.redhat.com/show_bug.cgi?id=2177883 https://lore.kernel.org/linux-wireless/20230309104457.22628-1-jisoo.jang@yonsei.ac.kr/T/#u