In the Linux kernel, the following vulnerability has been resolved:
wifi: wcn36xx: fix channel survey memory allocation size
KASAN reported a memory allocation issue in wcn->chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn->chansurvey, ensuring proper initialization and preventing the use of uninitialized values when there are no frames on the channel.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64c4dcaeac1dc1030e47883b04a617ca9a4f164e",
"target": {
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-23984d65",
"digest": {
"threshold": 0.9,
"line_hashes": [
"285711792535722299375308155068977845519",
"226087286490219843370003339626512530746",
"13222552380361475731197124086686369915",
"181662721412377165008525428148345987781"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6200d947f050efdba4090dfefd8a01981363d954",
"target": {
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-4461d745",
"digest": {
"threshold": 0.9,
"line_hashes": [
"285711792535722299375308155068977845519",
"226087286490219843370003339626512530746",
"13222552380361475731197124086686369915",
"181662721412377165008525428148345987781"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64c4dcaeac1dc1030e47883b04a617ca9a4f164e",
"target": {
"function": "wcn36xx_probe",
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-45f146f4",
"digest": {
"length": 2174.0,
"function_hash": "234526924374326380084355052760840313290"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34cd2817708aec51ef1a6c007e0d6d5342a025d7",
"target": {
"function": "wcn36xx_probe",
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-46a91ec9",
"digest": {
"length": 2174.0,
"function_hash": "234526924374326380084355052760840313290"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6200d947f050efdba4090dfefd8a01981363d954",
"target": {
"function": "wcn36xx_probe",
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-5165e658",
"digest": {
"length": 2174.0,
"function_hash": "234526924374326380084355052760840313290"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae68efdff7a7a42ab251cac79d8713de6f0dbaa0",
"target": {
"function": "wcn36xx_probe",
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-851b4d54",
"digest": {
"length": 2174.0,
"function_hash": "234526924374326380084355052760840313290"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34cd2817708aec51ef1a6c007e0d6d5342a025d7",
"target": {
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-98e03bc5",
"digest": {
"threshold": 0.9,
"line_hashes": [
"285711792535722299375308155068977845519",
"226087286490219843370003339626512530746",
"13222552380361475731197124086686369915",
"181662721412377165008525428148345987781"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae68efdff7a7a42ab251cac79d8713de6f0dbaa0",
"target": {
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-b0ff5019",
"digest": {
"threshold": 0.9,
"line_hashes": [
"285711792535722299375308155068977845519",
"226087286490219843370003339626512530746",
"13222552380361475731197124086686369915",
"181662721412377165008525428148345987781"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e95f9c408ff8311f75eeabc8acf34a66670d8815",
"target": {
"function": "wcn36xx_probe",
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-b31f9cd9",
"digest": {
"length": 2174.0,
"function_hash": "234526924374326380084355052760840313290"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e95f9c408ff8311f75eeabc8acf34a66670d8815",
"target": {
"file": "drivers/net/wireless/ath/wcn36xx/main.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-57997-f6229f9f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"285711792535722299375308155068977845519",
"226087286490219843370003339626512530746",
"13222552380361475731197124086686369915",
"181662721412377165008525428148345987781"
]
},
"signature_type": "Line"
}
]