Vulnerability in Kernel: ath11k - Disable Spectral Scan During Spectral Deinit
Summary
GSD-2022-1003115: ath11k: disable spectral scan during spectral deinit. Affects Kernel versions < 4b9c54caef58d2b55074710952cda70540722c01. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a fundamental component of the Linux operating system that manages system resources and provides an interface for software to interact with the hardware. The ath11k module is responsible for supporting Qualcomm Atheros 802.11ax wireless LAN devices. Spectral scan is a feature that allows the device to analyze the radio spectrum for interference and other signals. However, during the deinitialization process, a vulnerability exists where the spectral scan is not properly disabled, potentially leading to security issues.
Vulnerability Detail
The vulnerability in the ath11k module of the Kernel allows for the spectral scan to remain active during the deinitialization process. This could result in unauthorized access to sensitive information or the execution of malicious code. Attackers may exploit this vulnerability to gain control over the affected system or launch further attacks. The vulnerability has been fixed in Linux Kernel version v5.17.14 by commit 4b9c54caef58d2b55074710952cda70540722c01.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the ath11k module or prevent its loading by blacklisting it. This can be achieved by adding the module name 'ath11k' to the blacklist configuration file (/etc/modprobe.d/blacklist.conf) or by using the 'modprobe' command with the '-b' option to prevent the module from loading. However, this workaround may result in the loss of wireless LAN functionality.
Conclusion
The vulnerability in the ath11k module of the Kernel, which allowed the spectral scan to remain active during deinitialization, has been addressed in Linux Kernel version v5.17.14. It is crucial to update the Kernel to the fixed version or apply the provided workaround to mitigate the risk of unauthorized access or code execution. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a core component of the Linux operating system that manages system resources and provides an interface for software to interact with the hardware.
The ath11k module is responsible for supporting Qualcomm Atheros 802.11ax wireless LAN devices.
Spectral scan is a feature that allows the device to analyze the radio spectrum for interference and other signals.
The vulnerability could lead to unauthorized access to sensitive information or the execution of malicious code, potentially compromising the security of the affected system.
To fix this vulnerability, it is recommended to update the Kernel to version v5.17.14 or later by downloading the updated source code and compiling it. Alternatively, you can disable the ath11k module or prevent its loading as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
