mac80211: Fix NULL ptr deref for injected rate info
Summary
GSD-2021-1001003: mac80211: Fix NULL ptr deref for injected rate info. Affects Kernel versions >= cb17ed29a7a5fea8c9bf70e8a05757d71650e025, < f74df6e086083dc435f7500bdbc86b05277d17af. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mac80211 package is a subsystem in the Linux Kernel that provides the implementation of the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling various aspects of wireless communication. The vulnerability in mac80211 involves a NULL pointer dereference when processing injected rate information. This vulnerability can potentially be exploited by an attacker to cause a denial-of-service condition or execute arbitrary code.
Vulnerability Detail
The vulnerability in mac80211 is caused by a NULL pointer dereference when handling injected rate information. This occurs when the rate control algorithm tries to access rate information that has not been properly initialized. An attacker can exploit this vulnerability by injecting specially crafted rate information, leading to a NULL pointer dereference and potentially triggering a system crash or executing arbitrary code. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. However, users can mitigate the risk by ensuring that their systems are running the latest version of the Linux Kernel and regularly applying security updates.
Conclusion
The vulnerability in mac80211 that involves a NULL pointer dereference for injected rate info has been addressed in Linux Kernel version v5.10.46. Users are advised to update their Linux Kernel to the latest version to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211 is a subsystem in the Linux Kernel that provides the implementation of the IEEE 802.11 wireless networking stack.
A NULL pointer dereference occurs when a program tries to access or manipulate data using a pointer that points to NULL, resulting in a crash or potential security vulnerability.
The impact of this vulnerability can range from a denial-of-service condition to the execution of arbitrary code, depending on how it is exploited.
To fix this vulnerability, update your Linux Kernel to version v5.10.46 or later by downloading the latest kernel source code and compiling it.
There is no specific workaround available, but keeping your system up to date with the latest security patches can help mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
