mac80211: validate extended element ID is present
Summary
GSD-2021-1002644: mac80211: validate extended element ID is present. Affects Kernel versions >= 41cbb0f5a29592874355e4159489eb08337cd50e, < 03029bb044ccee60adbc93e70713f3ae58abc3a1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mac80211 package is a subsystem in the Linux Kernel that provides support for wireless LAN devices. It is responsible for managing the wireless network interface and handling various operations related to wireless communication. This vulnerability specifically affects the mac80211 package in the Linux Kernel.
Vulnerability Detail
The vulnerability in mac80211 involves the validation of extended element ID. The extended element ID is a component used in wireless communication protocols. The vulnerability arises when the extended element ID is not properly validated, potentially leading to security vulnerabilities. The impact and plausibility of attacks related to this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v4.19.222 by commit 03029bb044ccee60adbc93e70713f3ae58abc3a1. The vulnerability was introduced in version v4.19 by commit 41cbb0f5a29592874355e4159489eb08337cd50e.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the mac80211 package in the Linux Kernel is vulnerable to a validation issue with extended element ID. It is recommended to update the Linux Kernel to version v4.19.222 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211 is a subsystem in the Linux Kernel that provides support for wireless LAN devices.
The impact of this vulnerability is currently unknown as the actual attack plausibility has not been proven.
Yes, this vulnerability has been fixed in Linux Kernel version v4.19.222.
To update the Linux Kernel, you can follow the update process provided by the Linux distribution you are using.
You can find more information about this vulnerability in the references link provided.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
