mac80211_hwsim: Uninitialized ieee80211_tx_info at hw_scan_work
Summary
GSD-2022-1000845: mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work. Affects Kernel versions < 13f0ea8d11934a017f5c353fa049a09de3c37ec0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mac80211_hwsim package is a software simulator for the mac80211 wireless LAN (WLAN) stack in the Linux kernel. It provides a virtual environment for testing WLAN drivers and applications. The package emulates virtual WLAN interfaces and allows users to simulate various network scenarios. The vulnerability discussed here affects the mac80211_hwsim package and its interaction with the ieee80211_tx_info structure.
Vulnerability Detail
The vulnerability arises from the failure to initialize the ieee80211_tx_info structure at the hw_scan_work function in the mac80211_hwsim package. This uninitialized structure can lead to potential security vulnerabilities. Although the impact and attack plausibility have not been proven, it is crucial to address this issue to ensure the security of the WLAN stack. The vulnerability has been fixed in Linux Kernel version v5.10.104 by commit 13f0ea8d11934a017f5c353fa049a09de3c37ec0.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The mac80211_hwsim package in the Linux Kernel is vulnerable to uninitialized ieee80211_tx_info at the hw_scan_work function. It is crucial to update the Linux Kernel to version v5.10.104 or later to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211_hwsim is a software simulator for the mac80211 wireless LAN stack in the Linux kernel. It provides a virtual environment for testing WLAN drivers and applications.
ieee80211_tx_info is a structure used in the WLAN stack to store information related to transmitted frames.
hw_scan_work is a function in the mac80211_hwsim package that performs hardware scanning operations.
Uninitialized ieee80211_tx_info can lead to unpredictable behavior and potential security vulnerabilities in the WLAN stack. Attackers may exploit this vulnerability to manipulate transmitted frames or disrupt network communication.
To fix this vulnerability, update the Linux Kernel to version v5.10.104 or later, which includes the necessary commit to initialize the ieee80211_tx_info structure.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
