Vulnerability in Kernel: ath11k - Disable Spectral Scan during Spectral Deinit
Summary
GSD-2022-1003614: ath11k: disable spectral scan during spectral deinit. Affects Kernel versions < 60afa4f4e1350c876d8a061182a70c224de275dd. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages communication between hardware and software. It provides essential functions and services to enable the proper functioning of the system. The ath11k module is responsible for managing Wi-Fi connectivity using Qualcomm Atheros chipsets. It includes support for spectral scanning, which allows the detection and analysis of radio frequency signals in the Wi-Fi spectrum. However, a vulnerability has been discovered in the ath11k module that allows an attacker to exploit the spectral scan functionality during the deinitialization process.
Vulnerability Detail
The vulnerability in the ath11k module allows an attacker to perform a spectral scan during the deinitialization process. This can lead to unauthorized access to sensitive information, such as Wi-Fi network credentials, and potentially enable further attacks on the system. The vulnerability has been fixed in Linux Kernel version v5.10.121 by commit 60afa4f4e1350c876d8a061182a70c224de275dd.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can temporarily disable the ath11k module or restrict access to the Wi-Fi interface to mitigate the risk until the Kernel is updated.
Conclusion
The vulnerability in the ath11k module of the Kernel allows an attacker to perform a spectral scan during the deinitialization process, potentially compromising sensitive information and enabling further attacks. It is crucial to update the Linux Kernel to version v5.10.121 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability allows an attacker to perform a spectral scan during the deinitialization process, potentially gaining unauthorized access to sensitive information and enabling further attacks.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze and alert you if the vulnerability is present.
Yes, the vulnerability has been fixed in Linux Kernel version v5.10.121 by commit 60afa4f4e1350c876d8a061182a70c224de275dd. It is recommended to update the Kernel to this version or later to mitigate the vulnerability.
There are no known exploits for this vulnerability at the moment. However, it is important to update the Kernel as soon as possible to prevent potential attacks.
The vulnerability was discovered by an automated security analysis tool and reported to the Linux Kernel security team.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
