mac80211: Use-after-free in CCMP/GCMP RX
Summary
GSD-2021-1001563: mac80211: fix use-after-free in CCMP/GCMP RX. Affects Kernel versions >= 0f716b48ed25503e6961f4b5b40ece36f7e4ed26, < 3d5d629c99c468458022e9b381789de3595bf4dd. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mac80211 is a subsystem in the Linux kernel that provides the implementation of the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling various operations related to wireless communication. The CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) and GCMP (Galois/Counter Mode Protocol) are encryption protocols used in Wi-Fi networks to secure data transmission. However, a use-after-free vulnerability has been discovered in the CCMP/GCMP RX (receive) process, which could potentially lead to security breaches and unauthorized access to sensitive information.
Vulnerability Detail
The use-after-free vulnerability in the CCMP/GCMP RX process of mac80211 allows an attacker to exploit a memory corruption issue. By sending specially crafted packets to a vulnerable system, an attacker can trigger the use of freed memory, leading to a potential crash or arbitrary code execution. This could result in a complete compromise of the affected system, allowing the attacker to gain unauthorized access, modify data, or launch further attacks. The vulnerability was introduced in Linux Kernel version v4.19.193 and has been fixed in version v4.19.209.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.19.209 or later. This can be done by downloading the latest kernel source code from the official Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compiling it according to the system's specifications. Alternatively, users can check for available updates through their Linux distribution's package manager and install the patched kernel version.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable Wi-Fi connectivity or use alternative wireless network interfaces that are not affected by this vulnerability. However, this may result in a loss of wireless network functionality. It is strongly recommended to apply the official fix as soon as possible.
Conclusion
The use-after-free vulnerability in the CCMP/GCMP RX process of mac80211 poses a significant security risk to systems running the affected Linux Kernel versions. It is crucial to apply the official fix by updating to version v4.19.209 or later to mitigate the vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211 is a subsystem in the Linux kernel that provides the implementation of the IEEE 802.11 wireless networking stack.
CCMP (Counter Mode with Cipher Block Chaining Message Authentication Code Protocol) and GCMP (Galois/Counter Mode Protocol) are encryption protocols used in Wi-Fi networks to secure data transmission.
A use-after-free vulnerability occurs when a program continues to use memory after it has been freed, potentially leading to memory corruption and security issues.
This vulnerability could allow an attacker to gain unauthorized access to a system, modify data, or execute arbitrary code, potentially leading to a complete compromise of the affected system.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.19.209 or later. Alternatively, users can check for available updates through their Linux distribution's package manager and install the patched kernel version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.