[SRU E/D/B/X 0/3] Multiple buffer overflows in Marvell driver
Stefan Bader
stefan.bader at canonical.com
Tue Nov 26 08:39:11 UTC 2019
Multiple buffer overflows have been found and fixed in the Marvell
wireless driver. For Xenial the main change is that the Marvell driver
has not yet its own subdirectory. So all paths had to be adjusted.
-Stefan
Wen Huang (2):
mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
libertas: Fix two buffer overflows at parsing bss descriptor
wangqize (1):
mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
drivers/net/wireless/marvell/libertas/cfg.c | 8 +++
.../net/wireless/marvell/mwifiex/sta_ioctl.c | 3 +-
drivers/net/wireless/marvell/mwifiex/tdls.c | 70 +++++++++++++++++--
3 files changed, 74 insertions(+), 7 deletions(-)
--
2.17.1
More information about the kernel-team
mailing list