mac80211: Fix NULL ptr deref for injected rate info
Summary
GSD-2021-1001086: mac80211: Fix NULL ptr deref for injected rate info. Affects Kernel versions >= cb17ed29a7a5fea8c9bf70e8a05757d71650e025, < 7b1b88232e40396ee1d8b19d42a050cda0a5aebb. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mac80211 package is a subsystem in the Linux Kernel that provides the implementation of the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling various aspects of wireless communication. The vulnerability in mac80211 involves a NULL pointer dereference when processing injected rate information. This vulnerability can potentially be exploited by an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code.
Vulnerability Detail
The vulnerability arises from a NULL pointer dereference in the mac80211 package when handling injected rate information. This occurs when the package fails to properly validate and handle the rate information, leading to a NULL pointer being dereferenced. An attacker can exploit this vulnerability by injecting specially crafted rate information, which can result in a NULL pointer dereference and subsequent system crash or code execution. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in version v5.9 of the Linux Kernel and has been fixed in version v5.12.13.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. However, users can mitigate the risk by ensuring they have updated their Linux Kernel to the fixed version v5.12.13 or later.
Conclusion
The mac80211 package in the Linux Kernel is vulnerable to a NULL pointer dereference issue when processing injected rate information. This vulnerability can potentially lead to a denial-of-service condition or arbitrary code execution. It is crucial to update the Linux Kernel to version v5.12.13 or later to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211 is a subsystem in the Linux Kernel that provides the implementation of the IEEE 802.11 wireless networking stack.
The vulnerability can potentially lead to a denial-of-service (DoS) condition or allow an attacker to execute arbitrary code.
To fix this vulnerability, update your Linux Kernel to version v5.12.13 or later.
There is no specific workaround available, but updating the Linux Kernel to the fixed version can mitigate the risk.
You can obtain the updated Linux Kernel from the official Linux Kernel repository or through your Linux distribution's package management system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
