Threats tagged 'ghsa-7vqv-hxrc-vvx2'

A vulnerability in the Linux kernel's wifi cfg80211 subsystem was resolved that involved improper validation of management frame lengths before processing. Specifically, certain management frames shorter than expected for their subtype could cause out-of-bounds reads when accessing fixed fields, such as the reason code in deauthentication frames. The fix added precise length checks per subtype and removed a misleading warning, ensuring malformed frames are dropped silently. This vulnerability affects specific Linux kernel versions listed and has a medium severity rating.