Vulnerability in mt76 Monitor Mode with sdio driver
Summary
GSD-2022-1001043: mt76: fix monitor mode crash with sdio driver. Affects Kernel versions < 95e2af01669c7a3cb7a933cefa06361f9db15059. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mt76 package is a driver for MediaTek MT76x0e, MT76x2e, MT7603, MT7615, and MT7663 wireless LAN chipsets. It provides support for various wireless functionalities, including monitor mode. Monitor mode allows the capturing of all wireless frames in the vicinity, making it a crucial feature for network analysis and security monitoring. However, a vulnerability has been discovered in the sdio driver implementation of mt76, which can lead to a crash when using monitor mode.
Vulnerability Detail
The vulnerability in the mt76 package arises from a flaw in the sdio driver. When monitor mode is enabled, the driver fails to handle certain conditions correctly, resulting in a crash. An attacker within the wireless range of the affected device could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition or execute arbitrary code. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.17.3 by commit 95e2af01669c7a3cb7a933cefa06361f9db15059.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in mt76's sdio driver can lead to a crash when using monitor mode. It is recommended to update the Linux Kernel to version v5.17.3 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mt76 is a driver package for MediaTek wireless LAN chipsets, providing support for various functionalities.
Monitor mode is a feature that allows the capturing of all wireless frames in the vicinity, useful for network analysis and security monitoring.
The impact of this vulnerability is not yet proven, but it could potentially lead to a denial-of-service (DoS) condition or arbitrary code execution.
Yes, this vulnerability has been fixed in Linux Kernel version v5.17.3 by commit 95e2af01669c7a3cb7a933cefa06361f9db15059.
To update the Linux Kernel, follow the standard update process for your Linux distribution. Ensure that you are using version v5.17.3 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
