CVE-2021-28660

Updated: 2023-11-09 20:17:20.043521

Description:

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x HIGH 8.3
CVSS Version 3.x HIGH 8.8

Status

OS name Project name Version Score Severity Status Errata Last updated
CentOS 6 ELS kernel 2.6.32 8.8 HIGH Not Vulnerable 2021-11-02 14:03:33
CentOS 8.4 ELS kernel 4.18.0 8.8 HIGH Not Vulnerable 2022-02-15 12:04:37
CentOS 8.5 ELS kernel 4.18.0 8.8 HIGH Ignored 2022-02-21 05:39:37
CloudLinux 6 ELS kernel 2.6.32 8.8 HIGH Not Vulnerable 2022-03-30 18:50:59
Oracle Linux 6 ELS kernel 2.6.32 8.8 HIGH Not Vulnerable 2022-03-30 18:50:59
Ubuntu 16.04 ELS linux-hwe 4.15.0 8.8 HIGH Already Fixed 2022-10-04 14:02:40
Ubuntu 16.04 ELS linux 4.4.0 8.8 HIGH Not Vulnerable 2021-11-02 14:03:33
Ubuntu 18.04 ELS linux 4.15.0 8.8 HIGH Already Fixed 2023-06-02 09:10:29