wifi: cfg80211: don't get the radio mask for netdev-less wdevs
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.112, 6.18.54, 7.2.8
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't get the radio mask for netdev-less wdevs cfg80211_calculate_bi_data() calls rdev_get_radio_mask() with wdev->netdev, which can be NULL and then crashes in mac80211. To avoid that, invert the order of checks since wdev->netdev is always valid for beaconing interfaces.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From abb4cfe3661aa05426916b21164f88ca5a405a3a · fixed in 5b313159c970e945ee125ca87fad0d96ed913e55; From abb4cfe3661aa05426916b21164f88ca5a405a3a · fixed in 693d777846d525b8b218bad97a1befa5d9bd4334; From abb4cfe3661aa05426916b21164f88ca5a405a3a · fixed in 7166da84a7fe3553f9065782fd80299a37b150e5; From abb4cfe3661aa05426916b21164f88ca5a405a3a · fixed in a7783e585360ee05dfe21d3173dbbe985c94f29e
- Linux Linux
6.11
- KernelLinux
From 6.11.0 · fixed in 6.12.112; From 6.13.0 · fixed in 6.18.54; From 6.19.0 · fixed in 7.2.8