In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: Fix response handling in iwlmvmsendrecoverycmd()
Resolve these issues by switching to iwlmvmsendcmdstatus(), which handles both size validation and frees the buffer.
[
{
"id": "CVE-2024-53059-0c6ce093",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"310188809464768924483499944690931160332",
"281039811633450256553438631141146614533",
"318677500659538324506605643985300985060",
"239393982504437164202015211375748451885",
"197833903850253650986032690054322145140",
"137094160378234000371731758051170573576",
"282887549764137229060463901880109805790",
"13271707795739384002513315423686506095",
"237823005445118181269303192564205033071",
"79307095440924847164436524432867878479",
"311970500157650638334488793585587966752",
"237234625355219119623843650334719823437",
"209882997613039849010634080486856995761",
"179098928405418218885394430070158295625",
"129659023848316417291853295915382028708",
"151037921743247640659951799653350057864",
"300856360785906734264625461460397466",
"309620992322284753532049190605365076220",
"13201281174677349846535560577898285623",
"334613070384421746156639052952764469414",
"152955338738333284893576816821556971790",
"207835279938580589215682584468101349523"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64d63557ded6ff3ce72b18ab87a6c4b1b652161c",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/fw.c"
}
},
{
"id": "CVE-2024-53059-5a2aec54",
"signature_version": "v1",
"digest": {
"length": 1122.0,
"function_hash": "335825079441509681177064148908126531467"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64d63557ded6ff3ce72b18ab87a6c4b1b652161c",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/fw.c",
"function": "iwl_mvm_send_recovery_cmd"
}
},
{
"id": "CVE-2024-53059-612e4562",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"310188809464768924483499944690931160332",
"281039811633450256553438631141146614533",
"318677500659538324506605643985300985060",
"239393982504437164202015211375748451885",
"197833903850253650986032690054322145140",
"137094160378234000371731758051170573576",
"282887549764137229060463901880109805790",
"13271707795739384002513315423686506095",
"237823005445118181269303192564205033071",
"79307095440924847164436524432867878479",
"311970500157650638334488793585587966752",
"237234625355219119623843650334719823437",
"209882997613039849010634080486856995761",
"179098928405418218885394430070158295625",
"129659023848316417291853295915382028708",
"151037921743247640659951799653350057864",
"300856360785906734264625461460397466",
"309620992322284753532049190605365076220",
"13201281174677349846535560577898285623",
"334613070384421746156639052952764469414",
"152955338738333284893576816821556971790",
"207835279938580589215682584468101349523"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3eb986c64c6bfb721950f9666a3b723cf65d043f",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/fw.c"
}
},
{
"id": "CVE-2024-53059-6bce6db7",
"signature_version": "v1",
"digest": {
"length": 1122.0,
"function_hash": "335825079441509681177064148908126531467"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9480c3045f302f43f9910d2d556d6cf5a62c1822",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/fw.c",
"function": "iwl_mvm_send_recovery_cmd"
}
},
{
"id": "CVE-2024-53059-b46ed854",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"310188809464768924483499944690931160332",
"281039811633450256553438631141146614533",
"318677500659538324506605643985300985060",
"239393982504437164202015211375748451885",
"197833903850253650986032690054322145140",
"137094160378234000371731758051170573576",
"282887549764137229060463901880109805790",
"13271707795739384002513315423686506095",
"237823005445118181269303192564205033071",
"79307095440924847164436524432867878479",
"311970500157650638334488793585587966752",
"237234625355219119623843650334719823437",
"209882997613039849010634080486856995761",
"179098928405418218885394430070158295625",
"129659023848316417291853295915382028708",
"151037921743247640659951799653350057864",
"300856360785906734264625461460397466",
"309620992322284753532049190605365076220",
"13201281174677349846535560577898285623",
"334613070384421746156639052952764469414",
"152955338738333284893576816821556971790",
"207835279938580589215682584468101349523"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9480c3045f302f43f9910d2d556d6cf5a62c1822",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/fw.c"
}
},
{
"id": "CVE-2024-53059-bdb15ee1",
"signature_version": "v1",
"digest": {
"length": 1122.0,
"function_hash": "335825079441509681177064148908126531467"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3eb986c64c6bfb721950f9666a3b723cf65d043f",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/fw.c",
"function": "iwl_mvm_send_recovery_cmd"
}
}
]