Description: Heap overflow in mwifiex_process_country_ie() function of Marvell Wifi driver References: https://www.openwall.com/lists/oss-security/2019/11/22/1 https://patchwork.kernel.org/patch/11256477/ Notes: bwh> Introduced in 3.7 by commit e89e2da29b7e "mwifiex: use country ie of bwh> requested AP while associating". Fixed by commit 3d94a4a8373b bwh> "mwifiex: fix possible heap overflow in mwifiex_process_country_ie()". carnil> Fixed as well in 5.4.12. Bugs: upstream: released (5.5-rc3) [3d94a4a8373bf5f45cf5f939e88b8354dbf2311b] 4.19-upstream-stable: released (4.19.96) [0aa8632c57930243bea6fa4ebcbff8fac089e664] 4.9-upstream-stable: released (4.9.210) [efa99b6f3844bd20d46c8afd78f92a0161a4718e] 3.16-upstream-stable: released (3.16.81) [3b2f9bd867e1a288b470da440992a908c5972644] sid: released (5.4.13-1) 4.19-buster-security: released (4.19.98-1) 4.9-stretch-security: released (4.9.210-1) 3.16-jessie-security: released (3.16.81-1)