Vulnerability in Kernel: cfg80211_stop_ap not called when switching from P2P_GO type
Summary
GSD-2021-1002225: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type. Affects Kernel versions >= ac800140c20e7ae51117e71289065bedd4930fc2, < 0738cdb636c21ab552eaecf905efa4a6070e3ebc. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and supports various subsystems. The cfg80211 module within the Kernel is responsible for handling wireless network configuration and management. It provides APIs for controlling wireless devices, including access point (AP) functionality.
In certain scenarios, when switching from the P2P_GO (Group Owner) type to another type, the cfg80211_stop_ap function is not called. This omission can lead to a lingering AP mode, potentially causing unintended network behavior and security vulnerabilities.
Vulnerability Detail
The vulnerability arises from the failure to invoke the cfg80211_stop_ap function when transitioning from the P2P_GO type to another type. This oversight can result in the AP mode persisting, even when it should be terminated. As a consequence, the wireless device may continue to operate as an access point, potentially exposing sensitive network information and allowing unauthorized access.
The impact of this vulnerability can vary depending on the specific network configuration and the presence of potential attackers. Exploitation of this vulnerability could lead to unauthorized access to the network, interception of network traffic, or other malicious activities. It is crucial to address this issue promptly to mitigate the associated risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can manually invoke the cfg80211_stop_ap function when transitioning from the P2P_GO type. This can be achieved by executing the following code snippet:
// Manually stop AP mode
cfg80211_stop_ap();
Conclusion
The vulnerability in the Kernel's cfg80211 module, which fails to call cfg80211_stop_ap when switching from the P2P_GO type, can lead to the persistence of the access point mode. This can result in unauthorized access to the network and potential security risks. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v4.9.291 or later. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in the persistence of the access point mode, potentially exposing sensitive network information and allowing unauthorized access.
To mitigate the risks, it is recommended to update the Linux Kernel to version v4.9.291 or later, which includes the necessary fix.
The vulnerability itself does not provide remote exploitation capabilities. However, if an attacker gains access to the network, they may be able to exploit the persistence of the access point mode.
There are no known instances of this vulnerability being actively exploited at this time. However, it is crucial to address the issue promptly to prevent potential exploitation.
Yes, a temporary workaround involves manually invoking the cfg80211_stop_ap function when transitioning from the P2P_GO type.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
