On Sun, 2024-06-23 at 17:49 +0900, Jeongjun Park wrote: > In the process of searching for matching hardware channels, wreq and > wreq->num_channels are checked to see if they are NULL. However, > if the value of wreq->num_channels is greater than IW_MAX_FREQUENCIES, > an out-of-bounds vulnerability occurs. > > Therefore, you must also add code to check whether the value of > wreq->num_channels is within the range. > This is the same more or less as https://msgid.link/20240531032010.451295-1-dmantipov@xxxxxxxxx no? johannes
