NVD Vulnerability Detail

CVE-2024-50008

Summary	In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() Replace one-element array with a flexible-array member in `struct host_cmd_ds_802_11_scan_ext`. With this, fix the following warning: elo 16 17:51:58 surfacebook kernel: ------------[ cut here ]------------ elo 16 17:51:58 surfacebook kernel: memcpy: detected field-spanning write (size 243) of single field "ext_scan->tlv_buffer" at drivers/net/wireless/marvell/mwifiex/scan.c:2239 (size 1) elo 16 17:51:58 surfacebook kernel: WARNING: CPU: 0 PID: 498 at drivers/net/wireless/marvell/mwifiex/scan.c:2239 mwifiex_cmd_802_11_scan_ext+0x83/0x90 [mwifiex]
Publication Date	Oct. 22, 2024, 4:15 a.m.
Registration Date	Oct. 22, 2024, 12:02 p.m.
Last Update	Nov. 9, 2024, 1:15 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/1756918f51e9ab247a0f4782cc28853c2bb457c1	Patch
2	https://git.kernel.org/stable/c/e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe	Patch
3	https://git.kernel.org/stable/c/17199b69a84798efffc475040fbef44374ef1de1	Patch
4	https://git.kernel.org/stable/c/fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc	Patch
5	https://git.kernel.org/stable/c/71267bd4e8c752d7af6c6b96bb83984a6a95273d	Patch
6	https://git.kernel.org/stable/c/a3a12c30f9510f3753286fadbc6cdb7dad78c1d5	Patch
7	https://git.kernel.org/stable/c/498365e52bebcbc36a93279fe7e9d6aec8479cee	Patch
8	https://git.kernel.org/stable/c/b55c8848fdc81514ec047b2a0ec782ffe9ab5323
9	https://git.kernel.org/stable/c/f9310a6704bf52e2493480edea896e1f9b795d40

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel における脆弱性

Title	Linux の Linux Kernel における脆弱性
Summary	Linux の Linux Kernel には、不特定の脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 9, 2024, midnight
Registration Date	Nov. 8, 2024, 11:25 a.m.
Last Update	Aug. 21, 2025, 10 a.m.

Affected System

Linux

Linux Kernel 5.10.227 未満

Linux Kernel 5.11 以上 5.15.168 未満

Linux Kernel 5.16 以上 6.1.113 未満

Linux Kernel 6.11 以上 6.11.3 未満

Linux Kernel 6.2 以上 6.6.55 未満

Linux Kernel 6.7 以上 6.10.14 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-50008	https://www.cve.org/CVERecord?id=CVE-2024-50008
National Vulnerability Database (NVD)
2	CVE-2024-50008	https://nvd.nist.gov/vuln/detail/CVE-2024-50008

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (17199b6)	https://git.kernel.org/stable/c/17199b69a84798efffc475040fbef44374ef1de1
2	wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (1756918)	https://git.kernel.org/stable/c/1756918f51e9ab247a0f4782cc28853c2bb457c1
3	wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (498365e)	https://git.kernel.org/stable/c/498365e52bebcbc36a93279fe7e9d6aec8479cee
4	wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (71267bd)	https://git.kernel.org/stable/c/71267bd4e8c752d7af6c6b96bb83984a6a95273d
5	wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (a3a12c3)	https://git.kernel.org/stable/c/a3a12c30f9510f3753286fadbc6cdb7dad78c1d5
6	wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (e59bdb1)	https://git.kernel.org/stable/c/e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe
7	wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (fef7b51)	https://git.kernel.org/stable/c/fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc
Linux Kernel
8	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年11月08日] 掲載	Nov. 8, 2024, 11:25 a.m.
2	[2025年08月21日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 21, 2025, 10 a.m.