CVE-2021-47347

wl1251: Fix possible buffer overflow in wl1251_cmd_scan

HIGH

7.8

CVSS Score

Published: May 21, 2024 at 02:35 PM UTC

Updated: August 5, 2026 at 09:24 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.8%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: wl1251: Fix possible buffer overflow in wl1251_cmd_scan Function wl1251_cmd_scan calls memcpy without checking the length. Harden by checking the length is within the maximum allowed size.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.4.2762.6.31 ≤ v < 4.14.2402.6.31 ≤ v < 4.19.1982.6.31 ≤ v < 4.4.2762.6.31 ≤ v < 4.9.2762.6.31 ≤ v < 5.10.512.6.31 ≤ v < 5.12.182.6.31 ≤ v < 5.13.32.6.31 ≤ v < 5.142.6.31 ≤ v < 5.4.1334.10 ≤ v < 4.14.2404.15 ≤ v < 4.19.1984.20 ≤ v < 5.4.1334.5 ≤ v < 4.9.2765.11 ≤ v < 5.12.185.13 ≤ v < 5.13.35.5 ≤ v < 5.10.512.6.312f01a1f58889fbfeb68b1bc1b52e4197f3333490

Vendor states this is fixed in 0f6c0488368c9ac1aa685821916fadba32f5d1ef (fixed)

Vendor states this is fixed in 115103f6e3f1c26c473766c16439c7c8b235529a (fixed)

Vendor states this is fixed in 302e2ee34c5f7c5d805b7f835d9a6f2b43474e2a (fixed)

Vendor states this is fixed in 40af3960a15339e8bbd3be50c3bc7b35e1a0b6ea (fixed)

Vendor states this is fixed in 57ad99ae3c6738ba87bad259bb57c641ca68ebf6 (fixed)

Vendor states this is fixed in c5e4a10d7bd5d4f419d8b9705dff60cf69b302a1 (fixed)

Vendor states this is fixed in d10a87a3535cce2b890897914f5d0d83df669c63 (fixed)

Vendor states this is fixed in d3d8b9c9c7843dce31e284927d4c9904fd5a510a (fixed)

Vendor states this is fixed in d71dddeb5380613f9ef199f3e7368fd78fb1a46e (fixed)

Vendor states this is fixed in 2.6.31 (unaffected)

Vendor states this is fixed in 4.14.240 (unaffected)

Vendor states this is fixed in 4.19.198 (unaffected)

Vendor states this is fixed in 4.4.276 (unaffected)

Vendor states this is fixed in 4.9.276 (unaffected)

Vendor states this is fixed in 5.10.51 (unaffected)

Vendor states this is fixed in 5.12.18 (unaffected)

Vendor states this is fixed in 5.13.3 (unaffected)

Vendor states this is fixed in 5.14 (unaffected)

Vendor states this is fixed in 5.4.133 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references