In the Linux kernel through 5.3.2, cfg80211mgdwext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
{ "urgency": "not yet assigned" }