Buffer overflow in Linux Kernel

CVE-2009-3280

Integer signedness error in the find_ie function in net/wireless/scan.c in the cfg80211 subsystem in the Linux kernel before 2.6.31.1-rc1 allows remote attackers to cause a denial of service (soft lockup) via malformed packets.

Vulnerability class: Buffer Overflow

EPSS: 0.032 (87.0th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Release Notes, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)