CVE-2024-38616

EUVD-2024-37479
In the Linux kernel, the following vulnerability has been resolved:

wifi: carl9170: re-fix fortified-memset warning

The carl9170_tx_release() function sometimes triggers a fortified-memset
warning in my randconfig builds:

In file included from include/linux/string.h:254,
                 from drivers/net/wireless/ath/carl9170/tx.c:40:
In function 'fortify_memset_chk',
    inlined from 'carl9170_tx_release' at drivers/net/wireless/ath/carl9170/tx.c:283:2,
    inlined from 'kref_put' at include/linux/kref.h:65:3,
    inlined from 'carl9170_tx_put_skb' at drivers/net/wireless/ath/carl9170/tx.c:342:9:
include/linux/fortify-string.h:493:25: error: call to '__write_overflow_field' declared with attribute warning: detected write beyond size of field (1st parameter); maybe use struct_group()? [-Werror=attribute-warning]
  493 |                         __write_overflow_field(p_size_field, size);

Kees previously tried to avoid this by using memset_after(), but it seems
this does not fully address the problem. I noticed that the memset_after()
here is done on a different part of the union (status) than the original
cast was from (rate_driver_data), which may confuse the compiler.

Unfortunately, the memset_after() trick does not work on driver_rates[]
because that is part of an anonymous struct, and I could not get
struct_group() to do this either. Using two separate memset() calls
on the two members does address the warning though.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.2 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CISA-ADPADP
8.2 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 47%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.17 ≤
𝑥
< 6.1.93
linuxlinux_kernel
6.2 ≤
𝑥
< 6.6.33
linuxlinux_kernel
6.7 ≤
𝑥
< 6.8.12
linuxlinux_kernel
6.9 ≤
𝑥
< 6.9.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.148-1
fixed
bookworm (security)
6.1.158-1
fixed
bullseye
5.10.223-1
not-affected
bullseye (security)
5.10.247-1
fixed
buster
not-affected
forky
6.17.13-1
fixed
sid
6.17.13-1
fixed
trixie
6.12.57-1
fixed
trixie (security)
6.12.48-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux-hwe
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
not-affected
linux-hwe-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
ignored
noble
Fixed 6.8.0-40.40
released
oracular
not-affected
trusty
not-affected
xenial
not-affected
linux-hwe-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-hwe-edge
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
ignored
linux-lts-xenial
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
not-affected
xenial
dne
linux-kvm
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
not-affected
linux-allwinner-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.0
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws-hwe
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
not-affected
linux-azure
bionic
ignored
focal
not-affected
jammy
not-affected
mantic
ignored
noble
Fixed 6.8.0-1012.14
released
oracular
not-affected
trusty
not-affected
xenial
not-affected
linux-azure-4.15
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-fde
bionic
dne
focal
ignored
jammy
not-affected
mantic
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-azure-fde-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-fde-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-fde-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-bluefield
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-edge
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
not-affected
linux-aws-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-fips
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp
bionic
ignored
focal
not-affected
jammy
not-affected
mantic
ignored
noble
Fixed 6.8.0-1012.13
released
oracular
not-affected
trusty
dne
xenial
not-affected
linux-gcp-4.15
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gke
bionic
dne
focal
ignored
jammy
not-affected
mantic
dne
noble
Fixed 6.8.0-1008.11
released
oracular
dne
trusty
dne
xenial
ignored
linux-gke-4.15
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gke-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gke-5.15
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gkeop
bionic
dne
focal
not-affected
jammy
not-affected
mantic
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-gkeop-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gkeop-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-ibm
bionic
dne
focal
not-affected
jammy
not-affected
mantic
ignored
noble
Fixed 6.8.0-1010.10
released
oracular
dne
trusty
dne
xenial
dne
linux-ibm-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-ibm-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-intel-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-intel-iotg
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-intel-iotg-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-iot
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-laptop
bionic
dne
focal
dne
jammy
dne
mantic
ignored
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency
bionic
dne
focal
dne
jammy
not-affected
mantic
ignored
noble
Fixed 6.8.0-40.40.1
released
oracular
not-affected
trusty
dne
xenial
dne
linux-lowlatency-hwe-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-nvidia
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
Fixed 6.8.0-1011.11
released
oracular
dne
trusty
dne
xenial
dne
linux-nvidia-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-nvidia-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.0
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
ignored
linux-oem-5.6
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-5.10
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-5.14
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-5.17
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.0
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.1
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.8
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
Fixed 6.8.0-1010.10
released
oracular
dne
trusty
dne
xenial
dne
linux-raspi2
bionic
ignored
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
ignored
linux-raspi-5.4
bionic
not-affected
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv
bionic
dne
focal
ignored
jammy
ignored
mantic
ignored
noble
Fixed 6.8.0-40.40.1
released
oracular
not-affected
trusty
dne
xenial
dne
linux-riscv-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-starfive
bionic
dne
focal
dne
jammy
dne
mantic
ignored
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-starfive-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-starfive-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-starfive-6.5
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-xilinx-zynqmp
bionic
dne
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-aws
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
ignored
noble
Fixed 6.8.0-1013.14
released
oracular
not-affected
trusty
not-affected
xenial
not-affected
linux-oracle
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
ignored
noble
Fixed 6.8.0-1010.10
released
oracular
not-affected
trusty
dne
xenial
not-affected
linux-raspi
bionic
dne
focal
not-affected
jammy
not-affected
mantic
ignored
noble
Fixed 6.8.0-1009.10
released
oracular
not-affected
trusty
dne
xenial
dne
linux-intel
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne
linux-nvidia-6.8
bionic
dne
focal
dne
jammy
Fixed 6.8.0-1011.11~22.04.1
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-nvidia-lowlatency
bionic
dne
focal
dne
jammy
dne
noble
Fixed 6.8.0-1011.11.1
released
oracular
dne
trusty
dne
xenial
dne
linux-hwe-6.8
bionic
dne
focal
dne
jammy
Fixed 6.8.0-40.40~22.04.3
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.8
bionic
dne
focal
dne
jammy
Fixed 6.8.0-40.40.1~22.04.1
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-riscv-6.8
bionic
dne
focal
dne
jammy
Fixed 6.8.0-40.40.1~22.04.1
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-intel-iot-realtime
bionic
dne
focal
dne
jammy
not-affected
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-raspi-realtime
bionic
dne
focal
dne
jammy
dne
noble
Fixed 6.8.0-2008.8
released
oracular
dne
trusty
dne
xenial
dne
linux-realtime
bionic
dne
focal
dne
jammy
not-affected
noble
Fixed 6.8.1-1006.6
released
oracular
not-affected
trusty
dne
xenial
dne
linux-aws-6.8
bionic
dne
focal
dne
jammy
Fixed 6.8.0-1013.14~22.04.1
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-gcp-6.8
bionic
dne
focal
dne
jammy
Fixed 6.8.0-1012.13~22.04.1
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oracle-6.8
bionic
dne
focal
dne
jammy
Fixed 6.8.0-1010.10~22.04.1
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-azure-6.8
bionic
dne
focal
dne
jammy
Fixed 6.8.0-1012.14~22.04.1
released
noble
dne
oracular
dne
trusty
dne
xenial
dne
linux-oem-6.11
bionic
dne
focal
dne
jammy
dne
noble
not-affected
oracular
dne
trusty
dne
xenial
dne