mac80211: Limit Injected VHT MCS/NSS in ieee80211_parse_tx_radiotap
Summary
GSD-2021-1001723: mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap. Affects Kernel versions >= 646e76bb5daf4ca38438c69ffb72cccb605f3466, < 997ee230e4f5285cd98445c102d9033c7ec4814b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mac80211 package is a subsystem in the Linux kernel that provides the implementation of the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling the transmission and reception of wireless frames. The package includes various components, such as the ieee80211_parse_tx_radiotap function, which is used to parse radiotap headers in transmitted frames.
The vulnerability identified in mac80211 allows for the injection of VHT (Very High Throughput) MCS (Modulation and Coding Scheme) and NSS (Number of Spatial Streams) values in the ieee80211_parse_tx_radiotap function. This injection is not properly limited, potentially leading to security issues.
The vulnerability was introduced in version v4.7 of the Linux Kernel by commit 646e76bb5daf4ca38438c69ffb72cccb605f3466 and has been fixed in version v5.14.10 by commit 997ee230e4f5285cd98445c102d9033c7ec4814b.
Vulnerability Detail
The vulnerability in mac80211 arises from the lack of proper limitation on injected VHT MCS/NSS values in the ieee80211_parse_tx_radiotap function. This can potentially be exploited by an attacker to manipulate the transmission of wireless frames and compromise the security of the system. The exact impact and attack vectors have not been proven yet, but the vulnerability has been identified as a potential security risk.
It is important to note that this vulnerability has been fixed in version v5.14.10 of the Linux Kernel. Therefore, it is recommended to update to this version or a later one to mitigate the risk.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in version v5.14.10 of the Linux Kernel, there is no specific workaround available. It is recommended to update to the fixed version to ensure the security of the system.
Conclusion
The vulnerability in mac80211 that allowed for the injection of VHT MCS/NSS values in the ieee80211_parse_tx_radiotap function has been fixed in version v5.14.10 of the Linux Kernel. It is crucial to update to this version or a later one to ensure the security of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211 is a subsystem in the Linux kernel that implements the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling the transmission and reception of wireless frames.
The ieee80211_parse_tx_radiotap function is a component of the mac80211 package that is used to parse radiotap headers in transmitted frames. It extracts information about the wireless transmission, such as signal strength and data rate.
The vulnerability allows for the injection of VHT MCS/NSS values in the ieee80211_parse_tx_radiotap function. If not properly limited, this injection can be exploited by an attacker to manipulate the transmission of wireless frames and potentially compromise the security of the system.
The exact impact and attack vectors of the vulnerability have not been proven yet. However, it has been identified as a potential security risk, and it is recommended to update to the fixed version of the Linux Kernel to mitigate any potential risks.
To update the Linux Kernel, you can follow the standard update process for your operating system. Alternatively, you can manually compile and install the updated kernel from the source code. Refer to the official documentation and resources provided by your Linux distribution for more information on updating the kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
