The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet.
Product | Vendor | Version |
---|---|---|
Linux kernel before 4.12.3 | n/a | < c33a9806dc806bcb4a31dc71fb06979219181ad4 |