Vulnerability in Kernel: cfg80211_leave_ocb not called when switching away from OCB
Summary
GSD-2021-1001116: cfg80211: call cfg80211_leave_ocb when switching away from OCB. Affects Kernel versions < f2c027a7750f2d7a35cd95858163cce9aae4c1aa. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel package is a crucial component of the Linux operating system. It provides the core functionality and acts as an interface between the hardware and software layers. The cfg80211 module within the Kernel is responsible for managing wireless network configuration. It allows users to connect to and interact with wireless networks. However, a vulnerability has been identified in the cfg80211 module, specifically related to the handling of OCB (Outside Context of a BSS) mode. OCB mode enables communication between devices without the need for a traditional access point. The vulnerability arises when switching away from OCB mode, as the cfg80211_leave_ocb function is not called, leading to potential security issues.
Vulnerability Detail
The vulnerability in the Kernel's cfg80211 module occurs when switching away from OCB mode without invoking the cfg80211_leave_ocb function. This oversight can result in security vulnerabilities, although the exact impact and attack plausibility have not been proven. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.4.129 by commit f2c027a7750f2d7a35cd95858163cce9aae4c1aa. To mitigate the risk, it is recommended to update to the fixed version or apply the relevant patch.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended course of action is to update the Kernel to the fixed version.
Conclusion
In conclusion, the Kernel's cfg80211 module is vulnerable to an issue where cfg80211_leave_ocb is not called when switching away from OCB mode. This vulnerability can potentially lead to security risks. It is crucial to update the Kernel to version v5.4.129 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a critical component of the Linux operating system, providing core functionality and acting as an interface between hardware and software layers.
The cfg80211 module is responsible for managing wireless network configuration in the Kernel. It allows users to connect to and interact with wireless networks.
OCB (Outside Context of a BSS) mode enables communication between devices without the need for a traditional access point.
The exact impact and attack plausibility of this vulnerability have not been proven. However, it has the potential to introduce security vulnerabilities.
To fix this vulnerability, it is recommended to update the Kernel to version v5.4.129 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
