[SRU E/D/B/X 0/3] Multiple buffer overflows in Marvell driver

Stefan Bader stefan.bader at canonical.com
Tue Nov 26 08:39:11 UTC 2019


Multiple buffer overflows have been found and fixed in the Marvell
wireless driver. For Xenial the main change is that the Marvell driver
has not yet its own subdirectory. So all paths had to be adjusted.

-Stefan

Wen Huang (2):
  mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
  libertas: Fix two buffer overflows at parsing bss descriptor

wangqize (1):
  mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()

 drivers/net/wireless/marvell/libertas/cfg.c   |  8 +++
 .../net/wireless/marvell/mwifiex/sta_ioctl.c  |  3 +-
 drivers/net/wireless/marvell/mwifiex/tdls.c   | 70 +++++++++++++++++--
 3 files changed, 74 insertions(+), 7 deletions(-)

-- 
2.17.1




More information about the kernel-team mailing list