Vulnerability in Kernel: cfg80211_stop_ap not called when switching from P2P_GO type
Summary
GSD-2021-1002234: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type. Affects Kernel versions >= ac800140c20e7ae51117e71289065bedd4930fc2, < 4e458abbb4a523f1413bfe15c079cf4e24c15b21. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between different software components, and ensures the overall stability and security of the system. The cfg80211 module within the Kernel is responsible for handling wireless network configuration and management.
The vulnerability identified in the Kernel's cfg80211 module relates to the failure to call cfg80211_stop_ap when switching from the P2P_GO type. This oversight can lead to unintended consequences and potential security risks.
Vulnerability Detail
The vulnerability arises from a missing call to cfg80211_stop_ap when transitioning from the P2P_GO type. This can result in the persistence of the access point (AP) mode, even when it should be terminated. As a consequence, an attacker may exploit this flaw to maintain unauthorized access to the AP, potentially enabling further attacks or unauthorized network usage. The vulnerability was introduced in version v3.6 of the Kernel and has been fixed in version v4.14.256 through commit 4e458abbb4a523f1413bfe15c079cf4e24c15b21.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can manually call the cfg80211_stop_ap function when switching from the P2P_GO type. This can be done by modifying the relevant code section responsible for the transition and adding the appropriate function call. Below is an example of how this can be implemented in C:
// Code snippet demonstrating the workaround
if (switching_from_P2P_GO) {
cfg80211_stop_ap();
}
Conclusion
The vulnerability in the Kernel's cfg80211 module, which fails to call cfg80211_stop_ap when switching from the P2P_GO type, can lead to unauthorized access and potential security risks. It is crucial to update the Linux Kernel to version v4.14.256 or later to mitigate this vulnerability. Users can also employ the provided workaround until the update is applied. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability allows an attacker to maintain unauthorized access to an access point (AP) even when it should be terminated. This can lead to further attacks or unauthorized network usage.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, this vulnerability can be exploited remotely if an attacker gains unauthorized access to the affected access point (AP). They can then maintain control over the AP, potentially enabling further attacks or unauthorized network usage.
Yes, a patch for this vulnerability is available in version v4.14.256 of the Linux Kernel. It is recommended to update to this version or a later one to mitigate the risk.
There are no known instances of this vulnerability being exploited in the wild at the time of this report. However, it is essential to apply the necessary updates and fixes to ensure the security of your system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
