APPLIED: [SRU E/D/B/X 0/3] Multiple buffer overflows in Marvell driver
Kleber Souza
kleber.souza at canonical.com
Mon Dec 2 14:59:14 UTC 2019
On 2019-11-26 09:39, Stefan Bader wrote:
> Multiple buffer overflows have been found and fixed in the Marvell
> wireless driver. For Xenial the main change is that the Marvell driver
> has not yet its own subdirectory. So all paths had to be adjusted.
>
> -Stefan
>
> Wen Huang (2):
> mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
> libertas: Fix two buffer overflows at parsing bss descriptor
>
> wangqize (1):
> mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
>
> drivers/net/wireless/marvell/libertas/cfg.c | 8 +++
> .../net/wireless/marvell/mwifiex/sta_ioctl.c | 3 +-
> drivers/net/wireless/marvell/mwifiex/tdls.c | 70 +++++++++++++++++--
> 3 files changed, 74 insertions(+), 7 deletions(-)
>
Applied to xenial, bionic, disco and eoan master-next branches.
Thanks,
Kleber
More information about the kernel-team
mailing list