Vulnerability in Kernel package: cfg80211_stop_ap not called when switching from P2P_GO type

Background

The Kernel package is a crucial component of the Linux operating system. It provides the core functionality and acts as an interface between the hardware and software layers. The cfg80211 module within the Kernel package is responsible for managing wireless LAN configuration. It allows users to create and manage wireless access points (APs) using the P2P_GO type. However, a vulnerability has been discovered where the cfg80211_stop_ap function is not called when switching from the P2P_GO type, potentially leading to unintended APs being left active.

Vulnerability Detail

The vulnerability arises from a missing call to the cfg80211_stop_ap function when transitioning from the P2P_GO type in the cfg80211 module. This oversight can result in unintended APs being left active, which may have security implications. Attackers could potentially exploit this vulnerability to gain unauthorized access to the network or perform other malicious activities. The vulnerability was introduced in version v3.6 of the Linux Kernel and has been fixed in version v5.10.82.

Workaround

As a temporary workaround, users can manually call the cfg80211_stop_ap function when switching from the P2P_GO type. This can be achieved by executing the following code snippet:

#include <linux/nl80211.h>
#include <net/cfg80211.h>

struct cfg80211_registered_device *rdev;

void stop_ap_on_type_switch(void)
{
    if (rdev && rdev->wiphy && rdev->wiphy->interface_modes & BIT(NL80211_IFTYPE_P2P_GO)) {
        cfg80211_stop_ap(rdev->wiphy, 0);
    }
}

Please note that this workaround is not a permanent solution and should be replaced with the official fix by updating the Kernel package.

Conclusion

In conclusion, a vulnerability has been identified in the Kernel package, specifically in the cfg80211 module, where the cfg80211_stop_ap function is not called when switching from the P2P_GO type. This can result in unintended active APs, potentially leading to security risks. It is recommended to update the Kernel package to version v5.10.82 or later to fix this vulnerability. A temporary workaround is available by manually calling the cfg80211_stop_ap function. For further support on vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for Kernel →

FAQ