Vulnerability in Kernel: ath11k - Change max no of active probe SSID and BSSID to fw capability
Summary
GSD-2022-1002835: ath11k: Change max no of active probe SSID and BSSID to fw capability. Affects Kernel versions < ec5dfa1d66f2f71a48dab027d26a9fa78eb0f58f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system. The ath11k module within the Kernel is responsible for managing wireless network connections. It allows devices to connect to Wi-Fi networks and perform various operations related to wireless communication. However, a vulnerability has been identified in the ath11k module that could potentially lead to security issues.
Vulnerability Detail
The vulnerability in the ath11k module involves a misconfiguration of the maximum number of active probe SSID (Service Set Identifier) and BSSID (Basic Service Set Identifier) allowed by the firmware. The current configuration does not align with the capabilities of the firmware, which can result in unexpected behavior and potential security risks. Attackers may exploit this vulnerability to perform unauthorized actions or gain unauthorized access to the system. The impact and attack plausibility of this vulnerability are yet to be proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is advised to apply the recommended fix by updating the Linux Kernel to the latest version.
Conclusion
The vulnerability in the ath11k module of the Kernel can pose security risks due to a misconfiguration of the maximum number of active probe SSID and BSSID allowed by the firmware. It is crucial to update the Linux Kernel to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system.
The ath11k module is responsible for managing wireless network connections in the Linux Kernel. It allows devices to connect to Wi-Fi networks and perform various operations related to wireless communication.
A probe SSID (Service Set Identifier) is a unique identifier broadcasted by a Wi-Fi network to announce its presence. A probe BSSID (Basic Service Set Identifier) is the MAC address of the access point broadcasting the probe SSID.
The misconfiguration of the maximum number of active probe SSID and BSSID allowed by the firmware can lead to unexpected behavior and potential security risks. Attackers may exploit this vulnerability to perform unauthorized actions or gain unauthorized access to the system.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.18.3 or later. The fix for this vulnerability was implemented in commit ec5dfa1d66f2f71a48dab027d26a9fa78eb0f58f of the Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
