Use-after-free vulnerability in iwlwifi
Summary
GSD-2022-1000326: iwlwifi: fix use-after-free. Affects Kernel versions >= 1d7cc54137a4f28506dc7beac235b240b08f4e59, < 7d6475179b85a83186ccce59cdc359d4f07d0bcb. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iwlwifi package is a component of the Linux Kernel, which is responsible for managing wireless network interfaces that use Intel Wireless WiFi Link adapters. It provides the necessary drivers and firmware for these adapters to function properly. The iwlwifi package is widely used in Linux-based systems to enable wireless connectivity.
Vulnerability Detail
The use-after-free vulnerability in iwlwifi refers to a programming flaw that occurs when a program continues to use a memory location after it has been freed. This can lead to various security issues, including the potential for remote code execution or privilege escalation. The vulnerability was introduced in version v4.19.226 of the Linux Kernel and was fixed in version v4.19.231 by commit 7d6475179b85a83186ccce59cdc359d4f07d0bcb. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The use-after-free vulnerability in iwlwifi can be mitigated by updating the Linux Kernel to the latest version and ensuring that the iwlwifi package is rebuilt and reinstalled. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
iwlwifi is a package in the Linux Kernel that provides drivers and firmware for Intel Wireless WiFi Link adapters.
A use-after-free vulnerability occurs when a program continues to use a memory location after it has been freed, leading to potential security issues.
The use-after-free vulnerability in iwlwifi could potentially allow for remote code execution or privilege escalation.
The vulnerability was introduced in version v4.19.226 of the Linux Kernel.
To fix the vulnerability, update the Linux Kernel to version v4.19.231 or later and rebuild/reinstall the iwlwifi package.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
