Use-After-Free Vulnerability in Linux Kernel's ath11k Package
Summary
CVE-2022-49238: In the Linux kernel, the following vulnerability has been resolved: ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855 Commit b4a0f54156ac ("ath11k: move peer delete after vdev stop of station for... Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. The ath11k package is a driver for Qualcomm Atheros 802.11ax wireless devices, enabling communication between the operating system and the hardware. This package is crucial for maintaining stable and efficient wireless connectivity. However, it has been identified to have a vulnerability that could lead to system instability and potential exploitation.
Vulnerability Detail
In the Linux kernel, a vulnerability was discovered in the ath11k driver related to the handling of peer deletion during disconnection from access points (AP) for QCA6390 and WCN6855 devices. The issue arose from a change in the command sequence that inadvertently skipped necessary peer deletion operations, leading to a use-after-free condition. This flaw can result in a firmware crash and may allow an attacker to exploit the dangling pointer, potentially leading to arbitrary code execution or system crashes.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it is available.
Conclusion
The identified use-after-free vulnerability in the ath11k driver of the Linux kernel poses significant risks to system stability and security. Users are strongly encouraged to update their systems to the latest patched version to mitigate these risks. Monitoring tools like Vulert can assist in identifying vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed, potentially leading to arbitrary code execution or crashes.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit the Vulert playground at Vulert Scanner to check if your application is affected.
The risks include system crashes, potential data loss, and exploitation by attackers to execute arbitrary code, which could compromise system integrity.
Yes, the vulnerability specifically affects devices using the QCA6390 and WCN6855 chipsets.
If an immediate update is not possible, consider isolating the affected systems from untrusted networks and monitoring for unusual activity until the patch can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
