What happened
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: phy: check length before parsing PHY status IE Hardware might report PHY status IE with unexpected length, and parser might access out of range. Check the length ahead.
Affected versions
Linux: e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd through before 213f9e0ab2b4f35fe8d342333238c6cc91513fbf (git); e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd through before 98e5720afd7495eece580238f232e3b3b4c022da (git); e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd through before 884495c39de1a02f42bd40051b921e2311d6ac91 (git); 5.16 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.