mac80211: Use-after-free in CCMP/GCMP RX
Summary
GSD-2021-1001535: mac80211: fix use-after-free in CCMP/GCMP RX. Affects Kernel versions >= a9b57952fed41556c950a92123086724eaf11919, < f556e1d6fb9f2923a9a36f3df638c7d79ba09dbb. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mac80211 is a subsystem in the Linux kernel that provides the implementation of the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling various operations related to wireless communication. The vulnerability identified in mac80211 affects the CCMP/GCMP RX functionality, which is responsible for receiving and processing encrypted wireless frames using the CCMP or GCMP encryption algorithms.
Vulnerability Detail
The vulnerability in mac80211 is a use-after-free issue in the CCMP/GCMP RX functionality. A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed, leading to potential memory corruption and the possibility of arbitrary code execution. In this case, the vulnerability arises due to improper handling of memory during the processing of CCMP or GCMP encrypted frames. An attacker could exploit this vulnerability by sending specially crafted wireless frames, potentially leading to a denial-of-service (DoS) condition or the execution of arbitrary code with kernel privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability in mac80211's CCMP/GCMP RX functionality has been addressed in the Linux Kernel version v4.14.249. Users are advised to update their Linux Kernel to the fixed version or apply the provided fix to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211 is a subsystem in the Linux kernel that provides the implementation of the IEEE 802.11 wireless networking stack.
CCMP/GCMP RX is a functionality in mac80211 that handles the reception and processing of encrypted wireless frames using the CCMP or GCMP encryption algorithms.
A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed, leading to potential memory corruption and the possibility of arbitrary code execution.
This vulnerability could potentially lead to a denial-of-service (DoS) condition or the execution of arbitrary code with kernel privileges.
To fix this vulnerability, users should update their Linux Kernel to version v4.14.249 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
