CyberRota Analysis
AI-GeneratedA buffer overflow vulnerability exists in the Linux kernel's carl9170 driver, specifically in the rx_stream failover path, where it improperly handles the size of data copied from USB transfers. This flaw can lead to skb_over_panic, potentially causing system instability or crashes. Linux system administrators and developers using the carl9170 driver should prioritize applying the fix to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix buffer overflow in rx_stream failover path The failover continuation in carl9170_rx_stream() copies the full tlen from the second USB transfer instead of capping at rx_failover_missing bytes. When both transfers are near maximum size, the total exceeds the 65535-byte failover SKB, triggering skb_over_panic. Limit the copy size to the missing byte count. [Fix checkpatch CHECK:PARENTHESIS_ALIGNMENT]