[PATCH 0/1] [SRU focal/linux-oem-5.6] CVE-2020-36158

Tim Gardner tim.gardner at canonical.com
Tue Mar 2 17:43:10 UTC 2021


[Impact]
mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c
in the Linux kernel through 5.10.4 might allow remote attackers to execute
arbitrary code via a long SSID value, aka CID-5c455c5ab332.

[Test Case]
None

[Potential regression]
Clean upstream cherry-pick, released in linux-4.14.y, linux-4.19.y,
linux-4.4.y, linux-4.9.y, linux-5.10.y, linux-5.4.y.txt




More information about the kernel-team mailing list