SB2024052734 - Information disclosure in Linux kernel wilc1000 driver
Published: May 27, 2024 Updated: May 14, 2025
Security Bulletin ID
SB2024052734
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2023-52768)
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to a boundary condition within the wilc_wlan_init() function in drivers/net/wireless/microchip/wilc1000/wlan.c. A local user can trigger an out-of-bounds read error and read contents of memory on the system.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/541b3757fd443a68ed8d25968eae511a8275e7c8
- https://git.kernel.org/stable/c/4b0d6ddb6466d10df878a7787f175a0e4adc3e27
- https://git.kernel.org/stable/c/6aaf7cd8bdfe245d3c9a8b48fe70c2011965948e
- https://git.kernel.org/stable/c/3ce1c2c3999b232258f7aabab311d47dda75605c
- https://git.kernel.org/stable/c/05ac1a198a63ad66bf5ae8b7321407c102d40ef3
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.140
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.64
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.13
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.3
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7