ipw2x00: Potential NULL dereference in libipw_xmit()
Summary
GSD-2022-1003999: ipw2x00: Fix potential NULL dereference in libipw_xmit(). Affects Kernel versions < b4628e0d3754ab2fc98ee6e3d21851ba45798077. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ipw2x00 package is a Linux kernel module that provides support for Intel PRO/Wireless 2100, 2200, and 2915 network adapters. It allows these wireless adapters to connect to Wi-Fi networks and communicate with other devices. The libipw_xmit() function is responsible for transmitting data packets over the wireless network. However, a potential vulnerability exists in this function that could lead to a NULL dereference.
Vulnerability Detail
The vulnerability in ipw2x00 arises from a potential NULL dereference in the libipw_xmit() function. If a specific condition is met, the function may attempt to dereference a NULL pointer, leading to a crash or potential code execution. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v4.14.283 by commit b4628e0d3754ab2fc98ee6e3d21851ba45798077.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The ipw2x00 package is vulnerable to a potential NULL dereference in the libipw_xmit() function. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v4.14.283 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ipw2x00 is a Linux kernel module that provides support for Intel PRO/Wireless 2100, 2200, and 2915 network adapters.
The libipw_xmit() function is responsible for transmitting data packets over the wireless network in the ipw2x00 package.
A NULL dereference occurs when a program attempts to access or manipulate data through a NULL pointer, resulting in a crash or potential code execution.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, this vulnerability has been fixed in Linux Kernel version v4.14.283 by commit b4628e0d3754ab2fc98ee6e3d21851ba45798077.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
