Use-after-free vulnerability in wifi: mac80211
Summary
GSD-2022-1003766: wifi: mac80211: fix use-after-free in chanctx code. Affects Kernel versions >= 5bcae31d9cb1ebfad3ad5a3eea04c8cdc329a04f, < 265bec4779a38b65e86a25120370f200822dfa76. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The wifi: mac80211 package is a component of the Linux Kernel that provides the implementation of the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling communication between devices. This vulnerability affects versions of the Linux Kernel starting from v3.17 and was fixed in v5.4.198. The vulnerability allows for a use-after-free condition in the chanctx code, which can lead to potential security issues.
Vulnerability Detail
The use-after-free vulnerability in the chanctx code of wifi: mac80211 allows an attacker to exploit a freed memory region. This can result in various security issues, such as remote code execution, privilege escalation, or denial of service. The vulnerability was introduced in Linux Kernel v3.17 and was fixed in v5.4.198 by commit 265bec4779a38b65e86a25120370f200822dfa76.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can apply patches or backports provided by the Linux distribution maintainers. These patches can address the specific vulnerability and mitigate the risk until a complete Kernel update is performed. It is recommended to consult the official documentation or support channels of the Linux distribution for guidance on applying patches or backports.
Conclusion
The use-after-free vulnerability in wifi: mac80211 can pose significant security risks if left unaddressed. It is crucial to update the Linux Kernel to version v5.4.198 or later to mitigate this vulnerability. Applying patches or backports provided by the Linux distribution maintainers can serve as a temporary workaround. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Wifi: mac80211 is a component of the Linux Kernel that handles the implementation of the IEEE 802.11 wireless networking stack. It manages wireless network interfaces and facilitates communication between devices.
A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed. This can lead to various security issues, as the freed memory can be modified or reallocated by an attacker.
The use-after-free vulnerability in wifi: mac80211 can potentially allow an attacker to execute arbitrary code, escalate privileges, or cause denial of service. The specific impact depends on the attacker's capabilities and the context in which the vulnerability is exploited.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the playground will analyze it for any open-source vulnerabilities, including this one.
More information about the fix for this vulnerability can be found in the Linux Kernel repository. The commit 265bec4779a38b65e86a25120370f200822dfa76 addresses this issue and provides details on the changes made to resolve the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
