ipw2x00: Potential NULL dereference in libipw_xmit()
Summary
GSD-2022-1003159: ipw2x00: Fix potential NULL dereference in libipw_xmit(). Affects Kernel versions < 5f7ea274e88c0eeffe6bd6dbf6cf5c479d356af6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ipw2x00 package is a Linux kernel module that provides support for Intel PRO/Wireless 2100, 2200, and 2915 network adapters. It allows these wireless adapters to communicate with the operating system and connect to wireless networks. The libipw_xmit() function is responsible for transmitting data packets from the adapter to the network. However, a potential vulnerability exists in this function that could lead to a NULL dereference.
Vulnerability Detail
The vulnerability in ipw2x00 arises from a potential NULL dereference in the libipw_xmit() function. If a specific condition is met during the transmission of data packets, a NULL pointer can be dereferenced, leading to a system crash or potential privilege escalation. This vulnerability has not yet been proven to have a significant impact or be exploitable, but it is important to address it to ensure system stability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The ipw2x00 package is vulnerable to a potential NULL dereference in the libipw_xmit() function. To ensure system stability and security, it is recommended to update the Linux kernel to version v5.17.14 or later. This fix resolves the vulnerability and mitigates the risk of system crashes or potential privilege escalation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ipw2x00 is a Linux kernel module that provides support for Intel PRO/Wireless 2100, 2200, and 2915 network adapters.
libipw_xmit() is a function in the ipw2x00 package responsible for transmitting data packets from the wireless adapter to the network.
A NULL dereference occurs when a program attempts to access or manipulate memory using a NULL pointer, leading to a crash or potential security vulnerability.
The impact of this vulnerability could range from a system crash to potential privilege escalation, depending on the specific conditions and attacker capabilities.
To fix this vulnerability, update the Linux kernel to version v5.17.14 or later, which includes the necessary fix for the potential NULL dereference in libipw_xmit().
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
