Vulnerability in Kernel: wifi: mac80211: fix queue selection for mesh/OCB interfaces
Summary
GSD-2022-1004707: wifi: mac80211: fix queue selection for mesh/OCB interfaces. Affects Kernel versions < 444be5a02b77f3b7a8ac9c1a0b074fbb3bd89cd0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a fundamental component of the Linux operating system, responsible for managing system resources and providing an interface between hardware and software. It is a critical part of the system's functionality and security. The specific vulnerability affects the wifi subsystem within the Kernel, more specifically the mac80211 module. This module is responsible for managing wireless network interfaces. The vulnerability relates to the incorrect selection of queues for mesh/OCB (Outside the Context of a Basic Service Set) interfaces. Mesh and OCB interfaces are used for wireless mesh networking and ad-hoc connections, respectively. The vulnerability can potentially lead to issues with packet transmission and reception on these interfaces, impacting the overall functionality and performance of wireless networks.
Vulnerability Detail
The vulnerability arises from a flaw in the queue selection mechanism for mesh/OCB interfaces in the mac80211 module. Due to this flaw, the wrong queue can be selected for transmitting and receiving packets on these interfaces. This can result in packet loss, delays, or other issues in wireless mesh and ad-hoc networks. An attacker within range of a vulnerable device could potentially exploit this vulnerability to disrupt network communication or launch denial-of-service attacks. The vulnerability has been addressed in Linux Kernel version v5.4.207 by commit 444be5a02b77f3b7a8ac9c1a0b074fbb3bd89cd0.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended course of action is to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
The vulnerability in the Kernel's wifi mac80211 module, which affects the queue selection for mesh/OCB interfaces, can lead to packet loss and other issues in wireless mesh and ad-hoc networks. It is recommended to update the Linux Kernel to version v5.4.207 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to packet loss, delays, or other issues in wireless mesh and ad-hoc networks. It can potentially be exploited by an attacker to disrupt network communication or launch denial-of-service attacks.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze the dependencies and alert you if any vulnerabilities, including this one, are found.
Yes, the vulnerability has been fixed in Linux Kernel version v5.4.207 by commit 444be5a02b77f3b7a8ac9c1a0b074fbb3bd89cd0. It is recommended to update the Kernel to this version or later to mitigate the vulnerability.
There is no specific temporary measure mentioned for this vulnerability. It is recommended to update the Kernel to the patched version as soon as possible.
You can find more information about this vulnerability in the GSD-2022-1004707 entry of the GSD Database maintained by the Cloud Security Alliance. The entry can be accessed at: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1004xxx/GSD-2022-1004707.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
